last executing test programs: 30m58.576423274s ago: executing program 32 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffa) 30m56.847311354s ago: executing program 33 (id=43): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) 30m55.220073585s ago: executing program 34 (id=54): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 30m52.212660691s ago: executing program 35 (id=80): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x6) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002cc0)={0x2, 0x0, [{0x5000, 0xd8, &(0x7f0000000a80)=""/216}, {0x4, 0x1, &(0x7f00000009c0)=""/1}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 30m43.132464186s ago: executing program 36 (id=110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e0000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000001600)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$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") openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r4 = syz_io_uring_setup(0x952, &(0x7f0000000240), &(0x7f0000000140)=0x0, &(0x7f0000000080)) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f0000000400)="1c8be17a121a570bfdce5d4aa144fbbd076a0961d322e70311ad8bf3d7ee40e99f75b2bb8d1b0d8589c7d6893a178d2eddba3071673c8a4d9f21495eb174fa694b5ba84b41c16d280195d4df0fabcc6c0839a98779365881ceb2785293f461a3f4d97b1cbd1563de3fec346a2227d0887f7103c81693cacba168efbcade317e3d7d4c43fb374794d13c99609a00ce8a2c727375e39e35eb430d8670286d170afd276a301bd9dfe5c6856f5efbc7a46cc85a62e442d4cd28d7af56644adb42f4e93e26cb4c5c894dcdd5ff60b45aa99479504062bedd051c01768", 0xda) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = eventfd2(0x1000000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000000)=r6, 0x1) readv(r6, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x40, 0x0) 30m28.307544198s ago: executing program 37 (id=178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000540)={0x7, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x230, &(0x7f0000000300)="$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") ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) 30m27.314455736s ago: executing program 38 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') 30m25.011817133s ago: executing program 39 (id=192): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write(r0, &(0x7f0000001700)="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", 0xfffffed6) 29m54.897145452s ago: executing program 2 (id=295): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0x10, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {0xffff}, {0xf, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000600)={0x8, {{0xa, 0x4e21, 0x717, @local, 0x5}}, {{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0xffffffffffffff0a) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC]) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) 29m54.894374302s ago: executing program 2 (id=297): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES32=r1, @ANYRESDEC=r4], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[0x0], 0x0, 0x0, 0x9e, &(0x7f0000000a80)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x403f501a}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r11 = socket(0x1e, 0x4, 0x0) sendfile(r11, r9, 0x0, 0x8010002b) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000800)={{0x0, 0x5, 0x6, 0x1000, 0x8, 0x5, 0x3, 0x8, 0x8000, 0x6, 0x7, 0x7, 0x5, 0x8, 0x442}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 29m53.927423247s ago: executing program 2 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf2502000000050004000200000005000400010000000000000073797a310000000005000400020000001400020070696d3672656730000000000000000009000700000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf25040000000900030073797a30000000000900030073797a3000000000140002006e657464657673696d300000000000000900010073797a000000000900010073797a3100"/94], 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x414) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 29m53.098360589s ago: executing program 2 (id=305): epoll_create1(0x0) epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000340)={[{@delalloc}, {@noquota}, {@i_version}, {@usrjquota}, {@data_ordered}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@block_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@dont_measure}]}, 0x0, 0x607, &(0x7f0000000ac0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4002c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@gid}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@discard}, {@umask={'umask', 0x3d, 0x7}}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1541, &(0x7f0000000840)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) stat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x122}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 29m50.364599099s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000540)={0x7, 0x4}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x230, &(0x7f0000000300)="$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") ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29m49.935806591s ago: executing program 2 (id=322): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0x10, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {0xffff}, {0xf, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000600)={0x8, {{0xa, 0x4e21, 0x717, @local, 0x5}}, {{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0xffffffffffffff0a) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) 29m49.414594192s ago: executing program 40 (id=322): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0x10, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {0xffff}, {0xf, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000600)={0x8, {{0xa, 0x4e21, 0x717, @local, 0x5}}, {{0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0xffffffffffffff0a) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) setxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x0) 22m20.477534098s ago: executing program 7 (id=2079): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b"], 0xb0) write$FUSE_INIT(r2, 0x0, 0x0) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) mount$binder(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x480, &(0x7f0000000600)={[{@max={'max', 0x3d, 0x1}}, {}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '@'}}, {@smackfsroot={'smackfsroot', 0x3d, '-&{)/+@'}}, {@hash}]}) quotactl_fd$Q_GETNEXTQUOTA(r6, 0x53fab6e503df7636, r3, &(0x7f0000000500)) 22m20.443232101s ago: executing program 7 (id=2080): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x8070bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5, 0x9, 0x0, 0x10000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m20.25401232s ago: executing program 7 (id=2081): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0xfffffffe, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22m19.014263563s ago: executing program 7 (id=2085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() unshare(0x2040400) syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r6, 0x4002f516, &(0x7f0000000540)={0x7, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x230, &(0x7f0000000300)="$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") ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 22m17.786573094s ago: executing program 7 (id=2090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000f000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r5, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x10000014}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) 22m16.795619502s ago: executing program 7 (id=2093): r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x36, 0x800000000004, @thr={&(0x7f0000000500)="af23dbbe4a941719767a4bc41ed33bc58a751d5ce7f4514c0f872cc268e761b7227a58288f5e34a57c25de6cd195675d5c7626e57d3544b8e135c982aab0d2ed110aa77fa2cc02dcfadfac9cd4abfcf6c5cca9a5145c0b300de7338af8ba7eab9523bce82e6a541c47ad48cb509f658a36d03ed3c75d4812356c8bf072e739011bb92b67790dd8c5ac9e71f9afcbff9e2e4bbeebcac35d9414e0a6d384d508cd4261fd28e00d4afac696bee3827c468e6aaab2cd4b762745b8e7b22e6fc8c920d826c5a4c0b17984d3b7cb49917d17f1e8e043bdcf5546b161b52cc587375e8188444ccf3b08cf", &(0x7f0000000700)="1cd10c0ef59993767ff5b2251174bf44b5da311e4b2d9620d9625f336c3cedf0378f6ebab3a8b8c25ef2d9a9f621f8d6d9eeb24ea4e6d169c6d8f5e0a4e08322925957c4441730e81dec507f8d2302701a66c2376d895e720abbfaac1cda89a38616a97053812034212182abca2de7743cce354e41dc7401c41c9a82685b8e34bf687e458c8b9b2acb02e71086e99810d8a8dc7bf9d4bc71d3a1c6c9342143ee02b7710a74cf95e1b5a664d8a7e6f50bea7c326139b3e595e5c076464367aadd8107ca323bc2fc0e"}}, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) gettid() r2 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0xc075, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB="004627c9bfe8fff8ee49637b15dcc7c5300ee930fbde"], &(0x7f0000000480)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) io_uring_enter(r2, 0x62dd, 0x0, 0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x400000000001, 0x0) 22m1.156068282s ago: executing program 41 (id=2093): r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x36, 0x800000000004, @thr={&(0x7f0000000500)="af23dbbe4a941719767a4bc41ed33bc58a751d5ce7f4514c0f872cc268e761b7227a58288f5e34a57c25de6cd195675d5c7626e57d3544b8e135c982aab0d2ed110aa77fa2cc02dcfadfac9cd4abfcf6c5cca9a5145c0b300de7338af8ba7eab9523bce82e6a541c47ad48cb509f658a36d03ed3c75d4812356c8bf072e739011bb92b67790dd8c5ac9e71f9afcbff9e2e4bbeebcac35d9414e0a6d384d508cd4261fd28e00d4afac696bee3827c468e6aaab2cd4b762745b8e7b22e6fc8c920d826c5a4c0b17984d3b7cb49917d17f1e8e043bdcf5546b161b52cc587375e8188444ccf3b08cf", &(0x7f0000000700)="1cd10c0ef59993767ff5b2251174bf44b5da311e4b2d9620d9625f336c3cedf0378f6ebab3a8b8c25ef2d9a9f621f8d6d9eeb24ea4e6d169c6d8f5e0a4e08322925957c4441730e81dec507f8d2302701a66c2376d895e720abbfaac1cda89a38616a97053812034212182abca2de7743cce354e41dc7401c41c9a82685b8e34bf687e458c8b9b2acb02e71086e99810d8a8dc7bf9d4bc71d3a1c6c9342143ee02b7710a74cf95e1b5a664d8a7e6f50bea7c326139b3e595e5c076464367aadd8107ca323bc2fc0e"}}, &(0x7f0000000280)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) gettid() r2 = syz_io_uring_setup(0x4f0e, &(0x7f0000000480)={0x0, 0xc075, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000600)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=0x0, @ANYBLOB="004627c9bfe8fff8ee49637b15dcc7c5300ee930fbde"], &(0x7f0000000480)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00\x00'], 0x48) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c) io_uring_enter(r2, 0x62dd, 0x0, 0x0, 0x0, 0x0) syslog(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x400000000001, 0x0) 19m35.052093938s ago: executing program 0 (id=2722): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000440)) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) llistxattr(&(0x7f0000000400)='./file1\x00', 0x0, 0x0) 19m32.541778007s ago: executing program 0 (id=2723): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES32=r1, @ANYRESDEC=r4], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[0x0], 0x0, 0x0, 0x9e, &(0x7f0000000a80)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x403f501a}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r11 = socket(0x1e, 0x4, 0x0) connect$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r11, r9, 0x0, 0x8010002b) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000800)={{0x0, 0x5, 0x6, 0x1000, 0x8, 0x5, 0x3, 0x8, 0x8000, 0x6, 0x7, 0x7, 0x5, 0x8, 0x442}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1fff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 19m31.563447514s ago: executing program 0 (id=2729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() syz_io_uring_setup(0x75a5, &(0x7f0000000500)={0x0, 0xfffffffd, 0x0, 0xfffffffe}, &(0x7f0000000000), &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000540)={0x7, 0x4}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r6, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x230, &(0x7f0000000300)="$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") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m30.107536268s ago: executing program 0 (id=2734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x8070bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r8], 0x70}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x7, 0x5, 0x9, 0x0, 0x10000000}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m25.032244851s ago: executing program 0 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ef001018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000003c0)='afs_lookup\x00', r1, 0x0, 0x3ff}, 0xffffff23) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x400, 0x4) statx(r2, &(0x7f0000000380)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x8, 0x68, 0x84}}) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a800008100000086dd60c4980b004a2f00fbffffff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0fde8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c21d74e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea76622158ddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa1771630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020febc3c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fad05a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e165cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c4171a11193102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 19m21.960940715s ago: executing program 0 (id=2755): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b"], 0xb0) write$FUSE_INIT(r2, 0x0, 0x0) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRESDEC=r4]) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) mount$binder(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x480, &(0x7f0000000600)={[{@max={'max', 0x3d, 0x1}}, {}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '@'}}, {@smackfsroot={'smackfsroot', 0x3d, '-&{)/+@'}}, {@hash}]}) quotactl_fd$Q_GETNEXTQUOTA(r6, 0x53fab6e503df7636, r3, &(0x7f0000000500)) 19m6.990416879s ago: executing program 42 (id=2755): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b"], 0xb0) write$FUSE_INIT(r2, 0x0, 0x0) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f0000000400)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRESDEC=r4]) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) mount$binder(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x480, &(0x7f0000000600)={[{@max={'max', 0x3d, 0x1}}, {}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}, {@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '@'}}, {@smackfsroot={'smackfsroot', 0x3d, '-&{)/+@'}}, {@hash}]}) quotactl_fd$Q_GETNEXTQUOTA(r6, 0x53fab6e503df7636, r3, &(0x7f0000000500)) 5m48.712914944s ago: executing program 5 (id=4829): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000001010103000000000001000000000003240001801400018008000100e000000108000200ac1414aa0c000280050001002f000000060012400001000008000c4000000001080003"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x4080) (async) timer_create(0x2, &(0x7f0000000100)={0x0, 0x20, 0x1, @thr={&(0x7f0000000040)="663420fce974fe5d040a0afc63a56f6e177d8e20f966a74aa8580b4bf86b96fa3075ebcf682d86dbd0ea31a38cdc606ec6eb22b2bc5068c9f546ed245f3047d1f3e5290add4f8fa27c9ef89cac4719e4be7129a7fcd0a2bffa549a10123aedca3047d02e10f6ed52ccc8b45357a309acf92c653fb8", &(0x7f00000000c0)="fdbd7418477bb3a14e6d0169ba7109406a734531964ec59f792caf323f4dcab7df219604c993af227388ce6dba9aae235bcdb15628"}}, &(0x7f0000000180)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x77359400}}, &(0x7f0000000280)) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) setresuid(0xffffffffffffffff, 0x0, 0xee01) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x862010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES64=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) (async) utime(&(0x7f0000000240)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x45) (async) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) (async) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r8, 0x3309) 5m48.639301622s ago: executing program 5 (id=4831): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 5m48.005720164s ago: executing program 5 (id=4835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000500)=""/160}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 5m46.770750966s ago: executing program 5 (id=4839): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 5m44.590482143s ago: executing program 5 (id=4842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1c0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffa000/0x3000)=nil, r4, 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000010000000e0000001000000000000000000000000ac1414bb000000000000000000000000fffe000bffff00000a00800000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000001000000003200000000000000e00000010000000000000000040000000335000001000000000000000000000000000000ff0100000000000000000000000000c85f0000003300"], 0x13c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x3f0c, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x40}}, 0x0) 5m43.834193538s ago: executing program 5 (id=4849): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x20000045, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0xfffffeab) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) 5m28.791519508s ago: executing program 43 (id=4849): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x20000045, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0xfffffeab) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) rt_sigqueueinfo(0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x7}, @timestamp], 0x59) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x1100) 1m5.622591843s ago: executing program 8 (id=5370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf2502000000050004000200000005000400010000000000000073797a310000000005000400020000001400020070696d3672656730000000000000000009000700000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m4.040463719s ago: executing program 8 (id=5374): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x401870c8, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) lseek(r5, 0x40203, 0x4) 1m1.108481938s ago: executing program 8 (id=5386): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (fail_nth: 6) 59.96432547s ago: executing program 8 (id=5395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf2502000000050004000200000005000400010000000000000073797a310000000005000400020000001400020070696d3672656730000000000000000009000700000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 58.537778231s ago: executing program 8 (id=5399): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000dc0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000dc0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x48}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x4000000) (async) 55.387018941s ago: executing program 8 (id=5405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 38.85443563s ago: executing program 44 (id=5405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 10.44914171s ago: executing program 3 (id=5507): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$inet(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, &(0x7f0000000280), 0x0}, 0x20) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r7, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 8.961113967s ago: executing program 3 (id=5511): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2) write$evdev(0xffffffffffffffff, &(0x7f00000003c0)=[{{}, 0x0, 0xb, 0x68}, {{}, 0x4, 0x6, 0x3}, {{}, 0x3, 0x4, 0x3}], 0x48) syz_pidfd_open(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x50) r6 = socket$inet6(0xa, 0x80000, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r8}, 0x66) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000000000007111aa0000000020009c080003000000850000000e00000095000000000000009500a50500000000"], &(0x7f0000000140)='GPL\x00', 0x5, 0xc1, &(0x7f000000cf3d)=""/193, 0x41000, 0x45, '\x00', r9, @fallback=0x1b, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000309021b00012000ac000904000001070000090905", @ANYRES8=r5], 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24000800, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080002d0ff000000001800"/28, @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000160a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xec, &(0x7f0000000500)=""/236, 0x0, 0x8}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000380)="eb0ebd57368e"}, 0x20) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) 7.966492985s ago: executing program 4 (id=5514): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6000, 0x20, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x8, 0x68, 0x84}}) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a800008100000086dd60c4980b004a2f00fbffffff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"a2e3ad214fc752f91b3d1a0987f70e06d038e7ff7fc6e5539b3272078b089b080f384b090890e0878f0e1ac6e7049b334d959b669a240d5b67f3988f7ef3195201c0fde8d178708c523c921b1b5d500f0d30090936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c21d74e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea76622158ddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa1771630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc90da8196c28d920bab05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d21487b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020febc3c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a158b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fad05a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae7183cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a799567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461600000000000000206ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f86b8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e165cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c4171a11193102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a75500000000d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 7.927384328s ago: executing program 6 (id=5515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 7.212714849s ago: executing program 1 (id=5517): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000340)}, {&(0x7f0000000080)="9eae4017efa5759ae08f2c710f426bf3f9056931b994bc56bf207a7ca4", 0x1d}, {0x0}], 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32=r3, @ANYBLOB="0000030000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.116292178s ago: executing program 9 (id=5518): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x100002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file1\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x21d, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 7.1001618s ago: executing program 3 (id=5519): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x403f501a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r4, 0x0, 0x8010002b) 7.00334357s ago: executing program 4 (id=5520): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000340)}, {&(0x7f0000000080)="9eae4017efa5759ae08f2c710f426bf3f9056931b994bc56bf207a", 0x1b}, {0x0}], 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32=r3, @ANYBLOB="0000030000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.238888155s ago: executing program 6 (id=5521): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x51d2, &(0x7f0000000300)={0x0, 0x3957, 0x40, 0x2, 0x402d7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 6.237111395s ago: executing program 9 (id=5522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 6.075420561s ago: executing program 1 (id=5523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf2502000000050004000200000005000400010000000000000073797a310000000005000400020000001400020070696d3672656730000000000000000009000700000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 5.306073967s ago: executing program 9 (id=5524): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES32=r1, @ANYRESDEC=r4], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[0x0], 0x0, 0x0, 0x9e, &(0x7f0000000a80)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x403f501a}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r11 = socket(0x1e, 0x4, 0x0) connect$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r11, r9, 0x0, 0x8010002b) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000800)={{0x0, 0x5, 0x6, 0x1000, 0x8, 0x5, 0x3, 0x8, 0x8000, 0x6, 0x7, 0x7, 0x5, 0x8, 0x442}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.282960389s ago: executing program 6 (id=5525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000080000000400000000000000", @ANYRES32, @ANYBLOB="fcffa5e6f00b2d855b4b4286b1ffff0000000000b83bd4f72fce69c6024350a484cabadd79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000180100007b1a86441f40153cc5c600000000000007010000f8ffffffb700000000000600ca03000000000000850000000400181100"/82, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b0af8ff000000009700000000f8ff94ffb7030008000000010000000000000076000000c3000040950000000000000000cf47341b6dcfa5db35b96ea1a25f7deba9cec33841390d82601f43eb83bad41d5f29e88ce66227d403295be0e46a465b060000000000000006ca1908cb0205687bfaf51389b43e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) unshare(0x80) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="840c2e14b8356e7f3517b0", 0xb}, {&(0x7f0000000500)="ee9a", 0x2}], 0x2}}], 0x1, 0x4400c800) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) 4.7612041s ago: executing program 1 (id=5526): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) socket$inet(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000280), 0x0}, 0x20) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 4.757125661s ago: executing program 4 (id=5527): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001880)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5}, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) (async) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file1\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @loopback}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4.737564643s ago: executing program 3 (id=5528): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r6, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 4.496373377s ago: executing program 4 (id=5529): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$eJzs3M1vFOUfAPDv7G7hx2v3h/gCoqJoJL60tKBy8KKJiQdNTPSAx1oKQRZqaE2ENLYYghcTJeFuTLyY+Bd48kTUk4lXvBsSYriAelkz3dllu91tt91tt3U/n2To83Sf3ef7nZln55kZpgH0rYPpP0nEzoi4GRGDEZGrb7CtsqTt7t2ZGf/rzsx4EuXyu38m6dvi7p2Z8WrTJPu5o1IppB+Uu5JEsUm/UxcvnR0rlSYuZPXh6XMfDU9dvPTimXNjpydOT5wfPX782NGRV14efakreaYx3d3/6eSBfW++f+3t8RPXPvj5+0q85fL1G0cW5NEdAxExU1snjZ7pbmc9t6uunBR6GAgrsjUiCtneejMGI39ld+21wXjjs54GB6ypcrlcHm398lwZ+A9LotcRAL1RPdCn57/VpX4C8M/aTj967vZrlROgNO972VJ5pRCXszYDDee33XQwIk7M/f11ukTD9RQAgLXwYzr/eaHJ/K8Y8VBdu93ZvaFiRPw/IvZExAMRsTciHoxK24cj4pEV9n+wob54/pO7tbrM2pPO/17N7m0tnP/V7oIV81lt13z+A8mpM6WJI9k6ORwDW9P6SNNPTyLm0p+/fdmq//r5X7qk/VfnglkctwpbF77n5Nj0WMeJZ25fjthfaJZ/EoX7WcS+iNi/yj7OPPfdgYW/yddKy+e/hC7cZyp/E/FsZfvPRUP+VcnS9yeH/xeliSPD1b1isV9+vfpOq/47yr8L0u2/ven+X8u/mNTfr51a9BFbluvj6u+ftzynWe3+vyV5b0Hnn4xNT18YidiSvLX493UXuKv1avs0/8OHmo//PXF/TTwaEelO/FhEPB4RT2SxPxkRT0XEoSXy/+n1pz9cff5rK81/dkXbf+WF/NkbP7Tqv73tf6xamQ+qne+/dgPsZN0BAADAZpGLiJ2R5IZq5VxuaKjy/+X3xvZcaXJq+vlTkx+fP1l5RqAYA7nqla7BuuuhI9m14Wp9NKvPZvWj2XXj6/lt8/Wh8cnSyV4nD31uR4vxn/oj3+vogDXneS3oX8Y/9K/Vj3/fHLDZLTOKc+sVB7D+HMWhfzUb/7M9iANYf47/0L9q4/+rNhrXPe7V+PAmsPk4/kP/Mv6hL3XyXP+GKMS3EUu3STZKqCsqfNHJ2wvrEGHkNsaKWsfCaD6ih2EU2v2rFnGxPNtxp73+ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwMAAP//Oyno9g==") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGPKT(r7, 0x80045438, &(0x7f0000000100)) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_open_pts(r6, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 3.369752718s ago: executing program 9 (id=5530): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x6000, 0x20, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x1, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x10, 0x8, 0x68, 0x84}}) syz_emit_ethernet(0x88, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a800008100000086dd60c4980b004a2f00fbffffff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) 3.330684111s ago: executing program 1 (id=5531): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) socket$inet(0x2, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r4, &(0x7f0000000280), 0x0}, 0x20) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r6, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 3.236420141s ago: executing program 6 (id=5532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) futex(0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x1fe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000030c0)=ANY=[@ANYBLOB="28000000120001000000008100000000100000000c0035000000000000000000080031"], 0x28}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mkdir(&(0x7f0000000000)='./bus\x00', 0x6c832ac377d24da9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x2d, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r8, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x2, @empty=0x2e00}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000020000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="0c030000", @ANYRES16=r8, @ANYBLOB="00042abd7000ffdbdf250f00000028000180080003004c0400001c00028008000200000000000800010003000000080001000c0000000c0002800800010026b40000240009800800020001000000080002000a0000000800020000000000080002000500000038000780080001000700000008000100fbc40000080001000800000008000100020000000c000400e00000000000000008000200000000002000028004000400080001000200000004000400040004000800010004000000cc0001800d0001007564703a73797a31000000002c0002800800040001000100080001000200000008000400ff0000000800030009000000080004000900000044000400200001000a004e2000000031fc01000000000000000000000000000000fc0100200002000a004e2300000001fe8000000000000000000000000000aa0000040024000280080002006a00000008000400050000000800010003000000080001001900000014000280080004000600000008000400060000000d0001007564703a73797a3200000000480004800900010073797a30000000000900010073797a30000000002c000780080003000300000008000100150000000800020000000000080002000000000008000100130000001801068049000300464a94bd8052aea2fa9a112f30da266c59e72736e7f5ea1a4333239afe6c15d45d4ed9301639fdc84829bf1fea31ccbf769a075b692afa64c9c91e3f0de13bac5413854c8e000000c1000300dcbd52ef0cca10dbeda07c698b8c9c334baaee71c7ac08da27f296d4f5d29439b9c19b3bf9f1b416e3d36a2ccf8c5b302ec4deb27e972e38aad7782733e77b4b283cb56fe6e1d02f4f18732833340e49327b327fe1eef579216d54a944fd8cee2b53fc29c394453986f7ae5b28a2e287caf3e4a82b7401670aaa877d8bb37c45dff3836a3ebc4a3e0600e4b18963e805b4a5683bbd80fdf9eaa23caadb168bac6d6bf98536a2fd0a62a3d2761ce24ea6608b4cc7430f41fd7116b55b30000000040005001c000380080002000000000008000200050000000800020084060000"], 0x30c}, 0x1, 0x0, 0x0, 0x24000010}, 0x400c050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=r6], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='writeback_bdi_register\x00', r5, 0x0, 0x10000000}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc020000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000000000000000fffffffa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500fe8000000000000000000000000000bb000000003c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000fc010000000000000000000000000001000000006c00000000000000ac1414aa0000000000000000000000000000000000008000000000000000000000000000ff01000000000000000000000000000100000000320000000a000000fc0100000000000000000000000000000000000004000200000000000000030000000000"], 0x17c}}, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000001240)) 2.386506465s ago: executing program 4 (id=5533): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000001440)="e403402e6d69aa1cef9ef9a6a8a811114a73730561f86ec24fbd20a031516af10645443ba1ea91a31e618c729fb36241fc852cf7795cc3c0d78ae4de1e5110eafba42f764d048680", 0x0, 0x48) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x1e) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r7, 0x112, 0xd, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000340)}, {&(0x7f0000000080)="9eae4017efa5759ae08f2c710f426bf3f9056931b994bc56bf207a7ca4", 0x1d}, {0x0}], 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005000000", @ANYRES32=r3, @ANYBLOB="0000030000000000000000000000000000000003", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.385741995s ago: executing program 9 (id=5534): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x51d2, &(0x7f0000000300)={0x0, 0x3957, 0x40, 0x2, 0x402d7}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 1.452318447s ago: executing program 6 (id=5535): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x13}, [@ldst={0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x900}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[], 0x0) 1.440847818s ago: executing program 1 (id=5536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000fedbdf2502000000050004000200000005000400010000000000000073797a310000"], 0x58}, 0x1, 0x0, 0x0, 0x20000890}, 0x20008040) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10020a0, 0x0, 0x1, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x40e7f, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) sendfile(r5, r5, 0x0, 0xffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1.188326503s ago: executing program 6 (id=5537): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='ext4_ext_rm_idx\x00', r1, 0x0, 0x3}, 0x1e) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000040)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f00000005c0), 0x0, 0x44044}}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x800004, 0x10000000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c0000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a1000000000000001c00128009000100766c616e000000000c000280067a83000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f00000005c0)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000d40), 0x0, &(0x7f0000001180)=ANY=[@ANYRESHEX=r2, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="1b37cba5cf49d7dd0ff5ecaae5c7e813868d47925023dc8861e8b523f80d0b18ff6261740d01f0299cf7dbc530eec90a65f7c3b8e586053ee6340f5ef845d8278b1e5b67147161205df7c091ac386f317defd3c0c54af1d77affc9fa343b89cee09ef9e648ab987368d879758a98b5628edcd7b1a0235d67ad52af46dc29ca755cde2154b5a805456ed89baa4bd2d2bd3b29a194a1742b197558a44430f830d8368b04cf8093ba0483569e583e32661ebabc465968645c4c490c478fcdc9b787b1cf7edb0ef449d73195a4a5934afda26304f27d8242bfde8bb3", @ANYRES32=r1], 0x390}}], 0x1, 0x5) bind$tipc(r7, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x210, 0x0, 0x0, 0x160, 0x0, 0x62020048, 0x178, 0x260, 0x260, 0x178, 0x260, 0x3, 0x0, {[{{@ip={@multicast1, @private=0xa010101, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x40}, 0xb003, 0x98, 0xb8, 0x8, {0xf400000000000000}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x270) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 150.610995ms ago: executing program 3 (id=5538): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ftruncate(r0, 0x6) rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='./file0\x00') 149.806255ms ago: executing program 9 (id=5539): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) stat(0x0, &(0x7f0000000440)) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) umount2(0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) llistxattr(0x0, 0x0, 0x0) 148.045795ms ago: executing program 1 (id=5540): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000007000000090000000500000080000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000680)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYRES16=r4, @ANYRES32=r1, @ANYRESDEC=r4], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r5, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[0x0], 0x0, 0x0, 0x9e, &(0x7f0000000a80)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x403f501a}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) r11 = socket(0x1e, 0x4, 0x0) connect$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r11, r9, 0x0, 0x8010002b) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000800)={{0x0, 0x5, 0x6, 0x1000, 0x8, 0x5, 0x3, 0x8, 0x8000, 0x6, 0x7, 0x7, 0x5, 0x8, 0x442}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x0) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup(r12, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5eb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 122.517628ms ago: executing program 4 (id=5541): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={0x0, 0xcd, 0x0, [0x2f8, 0x1ff, 0x2, 0x40, 0xfffffffffffffffc], [0xff, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc, 0x7, 0x7fff, 0xfffffffffffffffd, 0x9, 0x6, 0x8001, 0xe0a, 0xec7f, 0x7fffffffffffffff, 0x80, 0x3, 0x80000000, 0x0, 0x8, 0x778, 0x6, 0x13aa3e2c, 0x3, 0x99, 0x3, 0x521df42e, 0x8000000000000001, 0x4, 0x2, 0xffff, 0x2, 0x9, 0x764, 0x5, 0x7, 0x1000, 0x5, 0x5, 0x2, 0x9, 0x5, 0x2f2, 0x3000000000, 0x1, 0x6, 0x7fff, 0x80000001, 0x1, 0x7, 0x4, 0x3, 0x68, 0x3, 0x1, 0xd6, 0x10, 0x9, 0x10000, 0x6, 0x6, 0x8, 0xffffffffffffff3b, 0x4, 0x7fff, 0x401, 0x8a, 0x679, 0xd1d, 0x9, 0x7, 0xc7b2, 0x59b, 0x2, 0x3, 0x8000, 0xf, 0x16cd, 0x300000000, 0x0, 0x9, 0x8, 0x7, 0x666, 0x750, 0x5, 0x7, 0x5, 0x9, 0xffffffffffffffff, 0x0, 0x6, 0xfff, 0x8, 0xc000000000000000, 0xd14, 0xa7, 0xffffffffffff8000, 0x9, 0x0, 0x41, 0x2, 0x9, 0x9, 0x7, 0xe9, 0x7fffffff, 0x8000, 0xa4, 0x6, 0x3248, 0xfca5, 0x5, 0x7f, 0x4, 0x1, 0x6, 0x6, 0x4]}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e24, 0x80, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='Y', 0x1}], 0x1}, 0x4080) recvfrom(r4, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) pipe(&(0x7f0000000c00)={0xffffffffffffffff}) r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1000000a}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000004c0)={0xe0000012}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001400)={0x4, 0x0, {0x0, @struct={0x8, 0xfffffffd}, 0x0, 0x1, 0x7, 0x0, 0x1, 0xfffffffffffffff7, 0x8, @struct={0x1, 0x7}, 0xb8, 0xb, [0x2, 0x7, 0x8391, 0x2, 0x8, 0x96]}, {0x642, @struct={0x8, 0x7dbd}, r2, 0x6, 0x6000, 0x5, 0x7, 0x10, 0x14, @struct={0x25, 0x10000}, 0x54e, 0xd2, [0xfffffffffffffffe, 0xc, 0x8, 0x6, 0x5, 0x7]}, {0x9, @struct={0x9, 0xfffffffc}, r3, 0x100000001, 0x5, 0xd, 0x3, 0xd6, 0x28, @struct={0x4, 0xffff}, 0xffffff7f, 0x1, [0x6, 0x2, 0x9, 0xea9, 0x0, 0x7]}, {0x7fffffffffffffff, 0x37, 0xe}}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000013c0), 0x600, 0x0) ioctl$TIOCSRS485(r7, 0x542f, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r8, &(0x7f00000004c0)='./file0\x00', 0x2) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) io_submit(0x0, 0x0, 0x0) creat(0x0, 0xa1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r9, 0x5522) ioctl$USBDEVFS_BULK(r9, 0x5523, 0x0) 0s ago: executing program 3 (id=5542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000080000000400000000000000", @ANYRES32, @ANYBLOB="fcffa5e6f00b2d855b4b4286b1ffff0000000000b83bd4f72fce69c6024350a484cabadd79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000180100007b1a86441f40153cc5c600000000000007010000f8ffffffb700000000000600ca03000000000000850000000400181100"/82, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b0af8ff000000009700000000f8ff94ffb7030008000000010000000000000076000000c3000040950000000000000000cf47341b6dcfa5db35b96ea1a25f7deba9cec33841390d82601f43eb83bad41d5f29e88ce66227d403295be0e46a465b060000000000000006ca1908cb0205687bfaf51389b43e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) unshare(0x80) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x8) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="840c2e14b8356e7f3517b0", 0xb}, {&(0x7f0000000500)="ee9a", 0x2}], 0x2}}], 0x1, 0x4400c800) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x8}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) kernel console output (not intermixed with test programs): disconnect, device number 16 [ 1668.607264][T19243] loop1: detected capacity change from 0 to 256 [ 1668.789512][T19245] loop9: detected capacity change from 0 to 512 [ 1668.807280][T19245] EXT4-fs: Ignoring removed mblk_io_submit option [ 1668.814149][T19245] EXT4-fs: Ignoring removed mblk_io_submit option [ 1668.825682][T19245] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1668.837783][T19245] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1668.984805][T19245] EXT4-fs (loop9): 1 truncate cleaned up [ 1668.991455][T19245] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1669.498804][T18519] EXT4-fs (loop9): unmounting filesystem. [ 1669.543602][T19261] loop4: detected capacity change from 0 to 512 [ 1669.708927][T19261] EXT4-fs (loop4): 1 orphan inode deleted [ 1669.714804][T19261] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1669.725292][T18556] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1669.736402][T19261] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.315495][T19274] loop1: detected capacity change from 0 to 512 [ 1672.252373][T19277] netlink: 'syz.9.5045': attribute type 4 has an invalid length. [ 1672.301100][T18556] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 1672.357123][T19274] EXT4-fs (loop1): 1 orphan inode deleted [ 1672.362978][T19274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1672.475289][T19274] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1672.880547][T18556] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1672.897575][T18556] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 1672.963586][T11121] EXT4-fs (loop1): unmounting filesystem. [ 1672.970104][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1673.349993][T19294] loop9: detected capacity change from 0 to 512 [ 1673.505608][T19294] EXT4-fs (loop9): 1 orphan inode deleted [ 1673.511568][T19294] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1673.521953][T19294] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1673.703068][T19300] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1673.710417][T19300] overlayfs: failed to set xattr on upper [ 1674.985836][T19307] loop4: detected capacity change from 0 to 512 [ 1674.992345][ T8] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1675.003243][T19307] EXT4-fs: Ignoring removed mblk_io_submit option [ 1675.009739][T19307] EXT4-fs: Ignoring removed mblk_io_submit option [ 1676.159984][T19311] loop3: detected capacity change from 0 to 512 [ 1676.256730][T19307] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1676.264937][ T8] EXT4-fs error (device loop9): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 1676.321698][T19311] EXT4-fs (loop3): 1 orphan inode deleted [ 1676.327512][T19311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1676.338499][T19311] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1676.368996][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1676.452809][T19307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1676.769621][T19307] EXT4-fs (loop4): 1 truncate cleaned up [ 1676.805504][T19307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1676.816126][ T8] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1676.862947][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 1676.887258][T19321] netlink: 'syz.8.5054': attribute type 4 has an invalid length. [ 1676.940972][T19321] netlink: 'syz.8.5054': attribute type 4 has an invalid length. [ 1677.167310][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1677.176447][T18519] EXT4-fs (loop9): unmounting filesystem. [ 1677.289525][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1678.720027][T19331] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1678.727027][T19331] overlayfs: failed to set xattr on upper [ 1678.785751][T19336] syz.3.5056[19336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.785834][T19336] syz.3.5056[19336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.896418][T19338] syz.4.5057[19338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.907936][T19338] syz.4.5057[19338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1678.921455][T19338] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1680.979111][T19341] netlink: 'syz.1.5059': attribute type 4 has an invalid length. [ 1681.039592][ T2434] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1681.153924][T19348] loop1: detected capacity change from 0 to 256 [ 1681.380420][T19353] syz.3.5061[19353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1681.380550][T19353] syz.3.5061[19353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1681.382911][T19354] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5061'. [ 1681.925631][T19356] syz.8.5060[19356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1681.927014][T19356] syz.8.5060[19356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1683.545734][T19348] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1683.580020][T19356] netlink: 'syz.8.5060': attribute type 4 has an invalid length. [ 1684.306535][T19365] netlink: 'syz.3.5065': attribute type 4 has an invalid length. [ 1684.336076][T19365] netlink: 'syz.3.5065': attribute type 4 has an invalid length. [ 1685.450606][T19370] loop8: detected capacity change from 0 to 512 [ 1685.652798][T19348] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1685.962506][T19370] EXT4-fs (loop8): 1 orphan inode deleted [ 1685.968385][T19370] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1685.977826][T19370] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1685.977997][T19348] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1686.594100][T19377] loop3: detected capacity change from 0 to 512 [ 1686.961848][T16944] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1686.974086][T19377] EXT4-fs (loop3): 1 orphan inode deleted [ 1686.979857][T19377] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1686.989547][T19377] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1686.996055][T16944] EXT4-fs error (device loop8): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 1687.979441][T19388] netlink: 'syz.9.5070': attribute type 4 has an invalid length. [ 1688.140493][T19388] netlink: 'syz.9.5070': attribute type 4 has an invalid length. [ 1688.397002][T19389] loop4: detected capacity change from 0 to 256 [ 1689.229227][T16944] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1689.240546][T16944] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 1689.269275][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1689.275599][T10190] EXT4-fs (loop8): unmounting filesystem. [ 1689.332293][T19401] loop8: detected capacity change from 0 to 512 [ 1689.370014][T18776] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1689.370768][T19401] EXT4-fs: Ignoring removed mblk_io_submit option [ 1689.384327][T19401] EXT4-fs: Ignoring removed mblk_io_submit option [ 1689.396677][T19401] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1689.403775][T19401] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1689.415066][T19401] EXT4-fs (loop8): 1 truncate cleaned up [ 1689.421329][T19401] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1689.439747][T10190] EXT4-fs (loop8): unmounting filesystem. [ 1689.559981][T18776] usb 2-1: Using ep0 maxpacket: 8 [ 1689.566326][T18776] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.620859][T18776] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.635420][T19408] loop8: detected capacity change from 0 to 256 [ 1689.646127][T18776] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.660961][T18776] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1689.670445][T18776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.690031][ T2434] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1689.900110][ T2434] usb 10-1: Using ep0 maxpacket: 8 [ 1689.906375][ T2434] usb 10-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.918069][ T2434] usb 10-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.929684][ T2434] usb 10-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1689.940574][ T2434] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1689.949752][ T2434] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.733013][T19419] loop3: detected capacity change from 0 to 512 [ 1690.887850][T19419] EXT4-fs (loop3): 1 orphan inode deleted [ 1690.893759][T19419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1690.941227][T19419] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1691.873466][T19426] netlink: 'syz.4.5079': attribute type 4 has an invalid length. [ 1691.948165][T19427] netlink: 'syz.4.5079': attribute type 4 has an invalid length. [ 1692.288100][T19431] loop9: detected capacity change from 0 to 256 [ 1692.617688][T19433] loop1: detected capacity change from 0 to 512 [ 1692.731757][T19431] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1692.794755][T19433] EXT4-fs (loop1): 1 orphan inode deleted [ 1692.800717][T19433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1692.812780][T19433] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.982867][ T2434] usb 10-1: string descriptor 0 read error: -71 [ 1692.989715][ T2434] hub 10-1:32.0: Invalid hub with more than one config or interface [ 1692.998468][ T374] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1693.502098][T19438] netlink: 'syz.4.5084': attribute type 4 has an invalid length. [ 1693.513940][T19438] netlink: 'syz.4.5084': attribute type 4 has an invalid length. [ 1693.536710][ T374] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 1693.549370][T19431] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1693.571537][T19431] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1693.616429][T18776] usb 2-1: string descriptor 0 read error: -71 [ 1693.623860][T18776] hub 2-1:32.0: Invalid hub with more than one config or interface [ 1693.664424][T18776] hub: probe of 2-1:32.0 failed with error -22 [ 1693.670895][ T2434] hub: probe of 10-1:32.0 failed with error -22 [ 1693.681428][T18776] usb 2-1: USB disconnect, device number 18 [ 1693.687511][ T2434] usb 10-1: USB disconnect, device number 4 [ 1693.701689][ T374] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1693.733362][ T374] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 1693.745820][T11121] EXT4-fs (loop1): unmounting filesystem. [ 1693.752875][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1693.773696][T19445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1693.980323][T19447] syz.8.5083[19447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1693.980404][T19447] syz.8.5083[19447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1695.482612][T19449] xt_bpf: check failed: parse error [ 1695.518245][T19447] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5083'. [ 1695.550161][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1695.561464][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1695.572887][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1695.633032][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1695.641709][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1695.650214][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1695.720399][T18425] udevd[18425]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1695.720430][T18433] udevd[18433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1696.005790][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1696.175978][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1696.724227][T19459] netlink: 'syz.1.5085': attribute type 4 has an invalid length. [ 1696.733988][T19460] netlink: 'syz.1.5085': attribute type 4 has an invalid length. [ 1696.744891][ T28] audit: type=1400 audit(1760829893.399:932): avc: denied { relabelfrom } for pid=19444 comm="syz.3.5081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1696.812178][ T28] audit: type=1400 audit(1760829893.419:933): avc: denied { relabelto } for pid=19444 comm="syz.3.5081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1697.504456][T19475] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1697.511473][T19475] overlayfs: failed to set xattr on upper [ 1697.675031][T19483] loop4: detected capacity change from 0 to 512 [ 1698.615351][T19483] EXT4-fs (loop4): 1 orphan inode deleted [ 1698.621416][T19483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1698.634415][T19483] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.589427][T19503] netlink: 'syz.3.5095': attribute type 4 has an invalid length. [ 1700.740147][T19506] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1700.747437][T19506] overlayfs: failed to set xattr on upper [ 1701.546775][T19505] netlink: 'syz.3.5095': attribute type 4 has an invalid length. [ 1702.254291][ T359] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1702.278591][ T359] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:4: Failed to release dquot type 1 [ 1702.301224][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1702.909107][T19533] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1702.916190][T19533] overlayfs: failed to set xattr on upper [ 1703.287889][T19538] loop8: detected capacity change from 0 to 1024 [ 1703.807469][T19541] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1703.814567][T19541] overlayfs: failed to set xattr on upper [ 1704.371041][T19538] EXT4-fs: Ignoring removed nobh option [ 1704.376668][T19538] EXT4-fs: Ignoring removed bh option [ 1704.563691][T19538] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1705.359820][T19550] loop4: detected capacity change from 0 to 256 [ 1705.433730][T19545] netlink: 'syz.3.5105': attribute type 4 has an invalid length. [ 1705.614777][T19562] fuse: Unknown parameter 'fd50x0000000000000004' [ 1705.622823][T19538] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1706.044655][T19566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1706.051700][T19566] overlayfs: failed to set xattr on upper [ 1706.741651][T19574] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3836: comm syz.8.5106: Allocating blocks 385-513 which overlap fs metadata [ 1706.957434][T19537] EXT4-fs (loop8): pa ffff888133ad5dc8: logic 16, phys. 129, len 24 [ 1706.965522][T19537] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 8 [ 1707.020555][T10190] EXT4-fs (loop8): unmounting filesystem. [ 1707.237945][T19590] netlink: 'syz.4.5116': attribute type 4 has an invalid length. [ 1707.289405][T19590] netlink: 'syz.4.5116': attribute type 4 has an invalid length. [ 1708.706078][T19599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1708.713380][T19599] overlayfs: failed to set xattr on upper [ 1709.543649][T19605] loop3: detected capacity change from 0 to 1024 [ 1709.576818][T19605] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1709.585460][T19605] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1710.355244][T19603] tipc: Started in network mode [ 1710.360246][T19603] tipc: Node identity , cluster identity 4711 [ 1710.366377][T19603] tipc: Failed to set node id, please configure manually [ 1710.373555][T19603] tipc: Enabling of bearer rejected, failed to enable media [ 1712.573737][T19632] loop4: detected capacity change from 0 to 256 [ 1712.585662][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1712.653836][T19636] loop3: detected capacity change from 0 to 512 [ 1712.722497][T19636] EXT4-fs: Ignoring removed mblk_io_submit option [ 1712.729544][T19636] EXT4-fs: Ignoring removed mblk_io_submit option [ 1712.778189][T19636] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1712.809432][T19636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1712.847106][T19636] EXT4-fs (loop3): 1 truncate cleaned up [ 1712.854285][T19636] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1712.922799][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1713.105951][T19651] loop1: detected capacity change from 0 to 256 [ 1713.193520][T19652] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1713.200687][T19652] overlayfs: failed to set xattr on upper [ 1714.573589][T19668] netlink: 'syz.1.5135': attribute type 4 has an invalid length. [ 1716.708179][T19670] netlink: 'syz.1.5135': attribute type 4 has an invalid length. [ 1716.718186][T19671] netlink: 'syz.4.5137': attribute type 4 has an invalid length. [ 1716.728044][T19673] netlink: 'syz.4.5137': attribute type 4 has an invalid length. [ 1718.175412][T19701] loop4: detected capacity change from 0 to 512 [ 1718.251435][T19705] loop8: detected capacity change from 0 to 512 [ 1718.301276][T17125] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1718.423669][T19705] EXT4-fs (loop8): 1 orphan inode deleted [ 1718.429534][T19705] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1718.441136][T19705] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.470275][T19701] EXT4-fs (loop4): 1 orphan inode deleted [ 1718.476155][T19701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1718.486467][T19701] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.536185][ T8] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1718.568889][ T8] EXT4-fs error (device loop8): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 1718.640721][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1718.656564][T17125] usb 10-1: Using ep0 maxpacket: 8 [ 1718.686605][T17125] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1718.701038][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:0: Failed to release dquot type 1 [ 1718.745629][T17125] usb 10-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1718.776556][T17125] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.788903][T17125] usb 10-1: Product: syz [ 1718.794374][T17125] usb 10-1: Manufacturer: syz [ 1718.801194][T17125] usb 10-1: SerialNumber: syz [ 1719.001144][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1719.300516][T19717] netlink: 'syz.3.5146': attribute type 4 has an invalid length. [ 1719.316392][T19717] netlink: 'syz.3.5146': attribute type 4 has an invalid length. [ 1720.461996][T10190] EXT4-fs (loop8): unmounting filesystem. [ 1720.880579][T17125] usb 10-1: config 0 descriptor?? [ 1720.889918][T17125] usb 10-1: can't set config #0, error -71 [ 1720.910242][T17125] usb 10-1: USB disconnect, device number 5 [ 1722.613416][T19748] netlink: 'syz.3.5154': attribute type 4 has an invalid length. [ 1722.623798][T19748] netlink: 'syz.3.5154': attribute type 4 has an invalid length. [ 1722.664079][T19749] netlink: 'syz.8.5156': attribute type 4 has an invalid length. [ 1722.676084][T19749] netlink: 'syz.8.5156': attribute type 4 has an invalid length. [ 1723.088293][T19752] loop4: detected capacity change from 0 to 1024 [ 1723.102718][T19752] EXT4-fs: Ignoring removed i_version option [ 1723.110201][T19752] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1723.129326][T19752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1723.326201][T19756] netlink: 'syz.4.5157': attribute type 13 has an invalid length. [ 1723.399472][ T28] audit: type=1400 audit(1760829919.979:934): avc: denied { mounton } for pid=19751 comm="syz.4.5157" path="/file0" dev="bpf" ino=84822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 1723.902065][ T28] audit: type=1400 audit(1760829920.559:935): avc: denied { accept } for pid=19760 comm="syz.3.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1724.230230][T19766] loop8: detected capacity change from 0 to 512 [ 1726.775349][T19767] loop9: detected capacity change from 0 to 512 [ 1727.092123][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1727.278842][T19766] EXT4-fs (loop8): 1 orphan inode deleted [ 1727.284709][T19766] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1727.295751][T19767] EXT4-fs (loop9): 1 orphan inode deleted [ 1727.301735][T19767] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1727.313066][T19767] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.338589][T19766] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.720023][ T374] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1727.752698][ T374] EXT4-fs error (device loop8): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 1727.790056][ T374] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1727.800010][ T374] EXT4-fs error (device loop9): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 1727.820756][ T28] audit: type=1400 audit(1760829924.479:936): avc: denied { execute } for pid=19773 comm="syz.3.5162" name="file0" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1727.877460][T10190] EXT4-fs (loop8): unmounting filesystem. [ 1727.883678][T18519] EXT4-fs (loop9): unmounting filesystem. [ 1727.884502][ T28] audit: type=1400 audit(1760829924.479:937): avc: denied { execute_no_trans } for pid=19773 comm="syz.3.5162" path="/434/file0" dev="tmpfs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1728.026316][T19781] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1728.033417][T19781] overlayfs: failed to set xattr on upper [ 1729.789612][T19807] syz.1.5168[19807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1729.790912][T19807] syz.1.5168[19807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.530526][T19809] netlink: 'syz.4.5170': attribute type 4 has an invalid length. [ 1730.551288][T19809] netlink: 'syz.4.5170': attribute type 4 has an invalid length. [ 1730.688507][T19814] syz.9.5169[19814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.688594][T19814] syz.9.5169[19814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1730.704977][T19813] loop3: detected capacity change from 0 to 512 [ 1730.731440][T19813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1730.739417][T19813] EXT4-fs: Ignoring removed mblk_io_submit option [ 1730.746506][T19813] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1730.756961][T19813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800e018, mo2=0002] [ 1730.765611][T19813] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1730.772723][T19813] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5171: bg 0: block 361: padding at end of block bitmap is not set [ 1730.794033][T19818] loop4: detected capacity change from 0 to 256 [ 1730.801020][T19818] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1730.833488][T19818] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1730.843748][T19818] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1730.860811][T19813] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 1730.887987][T19813] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.5171: attempt to clear invalid blocks 33619980 len 1 [ 1730.904723][T19813] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5171: invalid indirect mapped block 1811939328 (level 0) [ 1730.921545][T19813] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.5171: invalid indirect mapped block 2185560079 (level 1) [ 1730.937422][T19813] EXT4-fs (loop3): 1 truncate cleaned up [ 1730.943354][T19813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1731.726496][T19825] xt_bpf: check failed: parse error [ 1731.742232][T19829] loop9: detected capacity change from 0 to 512 [ 1734.613482][T19829] EXT4-fs warning (device loop9): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop9. [ 1735.022795][T19836] loop4: detected capacity change from 0 to 256 [ 1735.154324][T11348] EXT4-fs (loop3): unmounting filesystem. [ 1735.399780][T19849] netlink: 'syz.1.5179': attribute type 4 has an invalid length. [ 1735.419707][T19849] netlink: 'syz.1.5179': attribute type 4 has an invalid length. [ 1736.103878][T19858] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1736.110939][T19858] overlayfs: failed to set xattr on upper [ 1736.905676][T19872] syz.1.5184[19872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1736.906988][T19872] syz.1.5184[19872] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1738.190174][T19871] netlink: 52 bytes leftover after parsing attributes in process `syz.8.5183'. [ 1738.963344][T19873] loop9: detected capacity change from 0 to 256 [ 1739.627133][T19877] syz.3.5186[19877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1739.627218][T19877] syz.3.5186[19877] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1739.647155][T19878] loop4: detected capacity change from 0 to 512 [ 1740.577642][T19878] EXT4-fs (loop4): 1 orphan inode deleted [ 1740.583672][T19878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1740.594988][T19878] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.966018][T18556] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1740.976014][T18556] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 1741.165364][T13362] EXT4-fs (loop4): unmounting filesystem. [ 1742.283459][T19896] loop8: detected capacity change from 0 to 256 [ 1744.141321][T19918] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1744.148324][T19918] overlayfs: failed to set xattr on upper [ 1745.343613][T19919] FAULT_INJECTION: forcing a failure. [ 1745.343613][T19919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1745.356832][T19919] CPU: 0 PID: 19919 Comm: syz.8.5197 Not tainted syzkaller #0 [ 1745.364326][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1745.374439][T19919] Call Trace: [ 1745.377749][T19919] [ 1745.380851][T19919] __dump_stack+0x21/0x24 [ 1745.385314][T19919] dump_stack_lvl+0xee/0x150 [ 1745.389943][T19919] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1745.395015][T19919] dump_stack+0x15/0x24 [ 1745.399241][T19919] should_fail_ex+0x3d4/0x520 [ 1745.404057][T19919] should_fail+0xb/0x10 [ 1745.408252][T19919] should_fail_usercopy+0x1a/0x20 [ 1745.413481][T19919] _copy_to_user+0x1e/0x90 [ 1745.417997][T19919] simple_read_from_buffer+0xe9/0x160 [ 1745.423384][T19919] proc_fail_nth_read+0x19a/0x210 [ 1745.428446][T19919] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1745.434013][T19919] ? security_file_permission+0x94/0xb0 [ 1745.439569][T19919] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 1745.445207][T19919] vfs_read+0x26e/0x8c0 [ 1745.449476][T19919] ? __cfi_vfs_read+0x10/0x10 [ 1745.454177][T19919] ? __kasan_check_write+0x14/0x20 [ 1745.459388][T19919] ? mutex_lock+0x8d/0x1a0 [ 1745.463815][T19919] ? __cfi_mutex_lock+0x10/0x10 [ 1745.468862][T19919] ? __fdget_pos+0x2cd/0x380 [ 1745.473458][T19919] ? ksys_read+0x71/0x240 [ 1745.477899][T19919] ksys_read+0x140/0x240 [ 1745.482166][T19919] ? __cfi_ksys_read+0x10/0x10 [ 1745.486961][T19919] ? debug_smp_processor_id+0x17/0x20 [ 1745.492351][T19919] __x64_sys_read+0x7b/0x90 [ 1745.496957][T19919] x64_sys_call+0x2f/0x9a0 [ 1745.501472][T19919] do_syscall_64+0x4c/0xa0 [ 1745.505894][T19919] ? clear_bhb_loop+0x30/0x80 [ 1745.510582][T19919] ? clear_bhb_loop+0x30/0x80 [ 1745.515277][T19919] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1745.521183][T19919] RIP: 0033:0x7f305ab8d9dc [ 1745.525701][T19919] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1745.545422][T19919] RSP: 002b:00007f305ba90030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1745.553846][T19919] RAX: ffffffffffffffda RBX: 00007f305ade6090 RCX: 00007f305ab8d9dc [ 1745.561826][T19919] RDX: 000000000000000f RSI: 00007f305ba900a0 RDI: 0000000000000009 [ 1745.569802][T19919] RBP: 00007f305ba90090 R08: 0000000000000000 R09: 0000000000000000 [ 1745.577784][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1745.585764][T19919] R13: 00007f305ade6128 R14: 00007f305ade6090 R15: 00007ffe58a87838 [ 1745.593837][T19919] [ 1746.090077][T19929] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1746.097293][T19929] overlayfs: failed to set xattr on upper [ 1746.881940][T18678] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1747.192878][T19933] syz.8.5200[19933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1747.192962][T19933] syz.8.5200[19933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1747.921522][T19943] syz.9.5203[19943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1747.933145][T19943] syz.9.5203[19943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1748.562506][T19944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5202'. [ 1748.587811][T19943] netlink: 'syz.9.5203': attribute type 4 has an invalid length. [ 1749.609045][T19956] syz.4.5201[19956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1749.609126][T19956] syz.4.5201[19956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1749.731996][T19961] netlink: 'syz.9.5205': attribute type 4 has an invalid length. [ 1750.178746][T19961] netlink: 'syz.9.5205': attribute type 4 has an invalid length. [ 1751.219904][T19971] tipc: Started in network mode [ 1751.224914][T19971] tipc: Node identity , cluster identity 4711 [ 1751.231137][T19971] tipc: Failed to set node id, please configure manually [ 1751.238456][T19971] tipc: Enabling of bearer rejected, failed to enable media [ 1752.918341][T19981] loop9: detected capacity change from 0 to 512 [ 1752.974431][T19986] syz.1.5213[19986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1752.975631][T19986] syz.1.5213[19986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1753.041420][T19986] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5213'. [ 1753.064558][T19987] syz.8.5214[19987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1753.064635][T19987] syz.8.5214[19987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1755.508876][T19981] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1755.577584][T19981] EXT4-fs: failed to create workqueue [ 1755.583849][T19981] EXT4-fs (loop9): mount failed [ 1758.145780][T20005] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1758.152878][T20005] overlayfs: failed to set xattr on upper [ 1758.168557][T20011] syz.1.5216[20011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1758.168871][T20011] syz.1.5216[20011] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1758.186684][T20011] netlink: 'syz.1.5216': attribute type 4 has an invalid length. [ 1759.319973][T20013] netlink: 'syz.8.5215': attribute type 4 has an invalid length. [ 1760.580436][T20023] syz.9.5223[20023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.580524][T20023] syz.9.5223[20023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1763.100928][T20030] netlink: 'syz.4.5220': attribute type 4 has an invalid length. [ 1763.135142][T20031] netlink: 'syz.4.5220': attribute type 4 has an invalid length. [ 1763.385331][T20038] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1763.392552][T20038] overlayfs: failed to set xattr on upper [ 1764.474829][T20055] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1764.482103][T20055] overlayfs: failed to set xattr on upper [ 1765.200255][T20056] syz.4.5227[20056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1765.200339][T20056] syz.4.5227[20056] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1765.226273][T20056] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5227'. [ 1768.299977][T20073] netlink: 'syz.8.5231': attribute type 4 has an invalid length. [ 1768.755258][T20077] netlink: 'syz.8.5231': attribute type 4 has an invalid length. [ 1769.744970][T20085] syz.1.5234[20085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.745323][T20085] syz.1.5234[20085] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.767210][T20085] netlink: 'syz.1.5234': attribute type 4 has an invalid length. [ 1770.351247][T20092] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1770.358406][T20092] overlayfs: failed to set xattr on upper [ 1770.932179][T20100] tipc: Started in network mode [ 1770.937143][T20100] tipc: Node identity , cluster identity 4711 [ 1770.943291][T20100] tipc: Failed to set node id, please configure manually [ 1770.950486][T20100] tipc: Enabling of bearer rejected, failed to enable media [ 1772.416952][T20106] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1772.424040][T20106] overlayfs: failed to set xattr on upper [ 1773.096365][T20102] netlink: 'syz.8.5238': attribute type 4 has an invalid length. [ 1773.143035][T20102] netlink: 'syz.8.5238': attribute type 4 has an invalid length. [ 1773.395453][T20114] tipc: Started in network mode [ 1773.400414][T20114] tipc: Node identity , cluster identity 4711 [ 1773.406663][T20114] tipc: Failed to set node id, please configure manually [ 1773.413892][T20114] tipc: Enabling of bearer rejected, failed to enable media [ 1773.841842][T20122] loop8: detected capacity change from 0 to 256 [ 1775.135420][T20145] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1775.142710][T20145] overlayfs: failed to set xattr on upper [ 1775.550548][T20146] syz.4.5250[20146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.550743][T20146] syz.4.5250[20146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1775.728658][T20146] netlink: 'syz.4.5250': attribute type 4 has an invalid length. [ 1777.534001][T20152] netlink: 'syz.3.5253': attribute type 4 has an invalid length. [ 1777.565640][T20152] netlink: 'syz.3.5253': attribute type 4 has an invalid length. [ 1777.860089][T20162] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1777.867154][T20162] overlayfs: failed to set xattr on upper [ 1778.519999][T20171] netlink: 'syz.3.5255': attribute type 4 has an invalid length. [ 1779.554873][T20171] netlink: 'syz.3.5255': attribute type 4 has an invalid length. [ 1780.865657][T20186] tipc: Started in network mode [ 1780.870684][T20186] tipc: Node identity , cluster identity 4711 [ 1780.876795][T20186] tipc: Failed to set node id, please configure manually [ 1780.883965][T20186] tipc: Enabling of bearer rejected, failed to enable media [ 1781.088143][ T28] audit: type=1400 audit(1760829977.739:938): avc: denied { view } for pid=20179 comm="syz.4.5261" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1781.653191][T20192] tipc: Enabling of bearer rejected, already enabled [ 1781.726415][T20197] loop9: detected capacity change from 0 to 512 [ 1781.738821][ T28] audit: type=1400 audit(1760829978.389:939): avc: denied { map } for pid=20195 comm="syz.1.5264" path="socket:[86014]" dev="sockfs" ino=86014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1781.875994][T20197] EXT4-fs (loop9): 1 orphan inode deleted [ 1781.881977][T20197] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1781.890432][T20203] FAULT_INJECTION: forcing a failure. [ 1781.890432][T20203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.905767][ T10] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1781.915627][T20197] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1781.925819][ T10] EXT4-fs error (device loop9): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 1781.959930][T20203] CPU: 0 PID: 20203 Comm: syz.3.5266 Not tainted syzkaller #0 [ 1781.967439][T20203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1781.977522][T20203] Call Trace: [ 1781.980819][T20203] [ 1781.983765][T20203] __dump_stack+0x21/0x24 [ 1781.988129][T20203] dump_stack_lvl+0xee/0x150 [ 1781.992743][T20203] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1781.997797][T20203] dump_stack+0x15/0x24 [ 1782.001978][T20203] should_fail_ex+0x3d4/0x520 [ 1782.006700][T20203] should_fail+0xb/0x10 [ 1782.010883][T20203] should_fail_usercopy+0x1a/0x20 [ 1782.015942][T20203] strncpy_from_user+0x24/0x2d0 [ 1782.020813][T20203] ? __cfi_vfs_write+0x10/0x10 [ 1782.025611][T20203] ? getname_flags+0xb9/0x500 [ 1782.030330][T20203] getname_flags+0xf4/0x500 [ 1782.034896][T20203] user_path_at_empty+0x30/0x1c0 [ 1782.039862][T20203] do_readlinkat+0xd4/0x480 [ 1782.044396][T20203] ? cp_old_stat+0x490/0x490 [ 1782.049007][T20203] ? __cfi_ksys_write+0x10/0x10 [ 1782.053894][T20203] ? debug_smp_processor_id+0x17/0x20 [ 1782.059300][T20203] __x64_sys_readlink+0x7f/0x90 [ 1782.064189][T20203] x64_sys_call+0x87f/0x9a0 [ 1782.068724][T20203] do_syscall_64+0x4c/0xa0 [ 1782.073171][T20203] ? clear_bhb_loop+0x30/0x80 [ 1782.077879][T20203] ? clear_bhb_loop+0x30/0x80 [ 1782.082606][T20203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1782.088538][T20203] RIP: 0033:0x7f531ed8efc9 [ 1782.092984][T20203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1782.112616][T20203] RSP: 002b:00007f531fb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 1782.121063][T20203] RAX: ffffffffffffffda RBX: 00007f531efe5fa0 RCX: 00007f531ed8efc9 [ 1782.129053][T20203] RDX: 0000000000000097 RSI: 00002000000021c0 RDI: 0000200000002000 [ 1782.137034][T20203] RBP: 00007f531fb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1782.145120][T20203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1782.153132][T20203] R13: 00007f531efe6038 R14: 00007f531efe5fa0 R15: 00007ffeadef7248 [ 1782.161116][T20203] [ 1782.215028][T18519] EXT4-fs (loop9): unmounting filesystem. [ 1782.337238][T20217] loop9: detected capacity change from 0 to 512 [ 1782.537492][T20217] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1782.712491][T20217] EXT4-fs (loop9): 1 truncate cleaned up [ 1782.739673][T20217] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1782.849729][T18519] EXT4-fs error (device loop9): mb_free_blocks:1810: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1782.879452][T18519] EXT4-fs (loop9): unmounting filesystem. [ 1783.459918][T18678] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1783.650026][T18678] usb 5-1: Using ep0 maxpacket: 8 [ 1783.656353][T18678] usb 5-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1783.829819][T20245] tipc: Started in network mode [ 1783.834896][T20245] tipc: Node identity , cluster identity 4711 [ 1783.841135][T20245] tipc: Failed to set node id, please configure manually [ 1783.848441][T20245] tipc: Enabling of bearer rejected, failed to enable media [ 1783.948193][ T1754] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1784.634410][T18678] usb 5-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1784.646036][T18678] usb 5-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1784.662620][T18678] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1784.971203][T20250] netlink: 'syz.8.5275': attribute type 4 has an invalid length. [ 1785.010047][ T1754] usb 2-1: Using ep0 maxpacket: 8 [ 1785.017787][ T1754] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1785.125489][ T1754] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1785.157463][ T1754] usb 2-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1785.172398][T18678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.220595][ T1754] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1785.231278][ T28] audit: type=1400 audit(1760829981.889:940): avc: granted { setsecparam } for pid=20256 comm="syz.8.5280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1785.251999][ T28] audit: type=1400 audit(1760829981.909:941): avc: granted { setsecparam } for pid=20256 comm="syz.8.5280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1785.295542][ T1754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.565998][ T1754] usb 2-1: string descriptor 0 read error: -71 [ 1785.578403][ T1754] hub 2-1:32.0: Invalid hub with more than one config or interface [ 1785.613597][ T1754] hub: probe of 2-1:32.0 failed with error -22 [ 1785.654867][ T1754] usb 2-1: USB disconnect, device number 19 [ 1785.703533][T20231] udevd[20231]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1785.886134][T18678] usb 5-1: string descriptor 0 read error: -71 [ 1785.893499][T18678] hub 5-1:32.0: Invalid hub with more than one config or interface [ 1785.901484][T18678] hub: probe of 5-1:32.0 failed with error -22 [ 1785.914810][T18678] usb 5-1: USB disconnect, device number 29 [ 1786.345655][T20270] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1786.352988][T20270] overlayfs: failed to set xattr on upper [ 1787.254349][T20017] udevd[20017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1788.882595][T20301] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5292'. [ 1790.440651][T20315] syz.4.5293[20315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1790.440833][T20315] syz.4.5293[20315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1791.350028][T20315] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5293'. [ 1793.146106][T20323] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1793.153394][T20323] overlayfs: failed to set xattr on upper [ 1793.941011][T20326] FAULT_INJECTION: forcing a failure. [ 1793.941011][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.993080][T20326] CPU: 0 PID: 20326 Comm: syz.8.5297 Not tainted syzkaller #0 [ 1794.000588][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1794.010669][T20326] Call Trace: [ 1794.013967][T20326] [ 1794.016912][T20326] __dump_stack+0x21/0x24 [ 1794.021272][T20326] dump_stack_lvl+0xee/0x150 [ 1794.025890][T20326] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1794.030933][T20326] ? __kasan_check_write+0x14/0x20 [ 1794.036087][T20326] dump_stack+0x15/0x24 [ 1794.040283][T20326] should_fail_ex+0x3d4/0x520 [ 1794.044994][T20326] ? skb_clone+0x1f5/0x380 [ 1794.049435][T20326] __should_failslab+0xac/0xf0 [ 1794.054235][T20326] should_failslab+0x9/0x20 [ 1794.058765][T20326] kmem_cache_alloc+0x3b/0x330 [ 1794.063657][T20326] ? __cfi_mutex_lock+0x10/0x10 [ 1794.068544][T20326] skb_clone+0x1f5/0x380 [ 1794.072810][T20326] pfkey_sendmsg+0x44e/0xfe0 [ 1794.077424][T20326] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 1794.082554][T20326] ? kernel_text_address+0xa0/0xd0 [ 1794.087701][T20326] ? __kernel_text_address+0xd/0x30 [ 1794.092922][T20326] ? security_socket_sendmsg+0x93/0xb0 [ 1794.098399][T20326] ? __cfi_pfkey_sendmsg+0x10/0x10 [ 1794.103532][T20326] ____sys_sendmsg+0x5a9/0x990 [ 1794.108327][T20326] ? __sys_sendmsg_sock+0x40/0x40 [ 1794.113373][T20326] ? import_iovec+0x7c/0xb0 [ 1794.117899][T20326] ___sys_sendmsg+0x21c/0x290 [ 1794.122593][T20326] ? __sys_sendmsg+0x270/0x270 [ 1794.127382][T20326] ? kstrtouint+0x74/0xe0 [ 1794.131752][T20326] ? __fdget+0x19c/0x220 [ 1794.136021][T20326] __sys_sendmmsg+0x274/0x460 [ 1794.140714][T20326] ? slab_free_freelist_hook+0xc2/0x190 [ 1794.146287][T20326] ? __cfi___sys_sendmmsg+0x10/0x10 [ 1794.151515][T20326] ? __cfi_ksys_write+0x10/0x10 [ 1794.156400][T20326] __x64_sys_sendmmsg+0xa0/0xb0 [ 1794.161278][T20326] x64_sys_call+0x3f5/0x9a0 [ 1794.165801][T20326] do_syscall_64+0x4c/0xa0 [ 1794.170235][T20326] ? clear_bhb_loop+0x30/0x80 [ 1794.174933][T20326] ? clear_bhb_loop+0x30/0x80 [ 1794.179669][T20326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.185587][T20326] RIP: 0033:0x7f305ab8efc9 [ 1794.190032][T20326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.209656][T20326] RSP: 002b:00007f305bab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1794.218181][T20326] RAX: ffffffffffffffda RBX: 00007f305ade5fa0 RCX: 00007f305ab8efc9 [ 1794.226300][T20326] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000003 [ 1794.234305][T20326] RBP: 00007f305bab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1794.242313][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1794.250313][T20326] R13: 00007f305ade6038 R14: 00007f305ade5fa0 R15: 00007ffe58a87838 [ 1794.258321][T20326] [ 1795.430825][T20338] netlink: 'syz.8.5299': attribute type 4 has an invalid length. [ 1795.568117][T20357] netlink: 'syz.3.5303': attribute type 4 has an invalid length. [ 1795.616648][T20357] netlink: 'syz.3.5303': attribute type 4 has an invalid length. [ 1795.838092][T20359] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1795.845325][T20359] overlayfs: failed to set xattr on upper [ 1797.671747][T20365] syz.9.5307[20365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1797.672171][T20365] syz.9.5307[20365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1798.370220][T20363] netlink: 'syz.9.5307': attribute type 4 has an invalid length. [ 1798.676158][T20338] netlink: 'syz.8.5299': attribute type 4 has an invalid length. [ 1800.115875][T20394] 9pnet: Could not find request transport: fgŒÌÂd [ 1801.870613][T20412] netlink: 'syz.8.5319': attribute type 4 has an invalid length. [ 1801.886693][T20412] netlink: 'syz.8.5319': attribute type 4 has an invalid length. [ 1803.409204][T20428] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1803.416564][T20428] overlayfs: failed to set xattr on upper [ 1804.469457][T20431] netlink: 'syz.9.5323': attribute type 4 has an invalid length. [ 1804.488552][T20431] netlink: 'syz.9.5323': attribute type 4 has an invalid length. [ 1804.822014][T20438] serio: Serial port ptm0 [ 1804.925883][T20440] tipc: Started in network mode [ 1804.931093][T20440] tipc: Node identity , cluster identity 4711 [ 1804.937208][T20440] tipc: Failed to set node id, please configure manually [ 1804.944428][T20440] tipc: Enabling of bearer rejected, failed to enable media [ 1805.372120][T20442] FAULT_INJECTION: forcing a failure. [ 1805.372120][T20442] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.511497][T20442] CPU: 1 PID: 20442 Comm: syz.3.5327 Not tainted syzkaller #0 [ 1805.519011][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1805.529082][T20442] Call Trace: [ 1805.532378][T20442] [ 1805.535321][T20442] __dump_stack+0x21/0x24 [ 1805.539679][T20442] dump_stack_lvl+0xee/0x150 [ 1805.544287][T20442] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1805.549333][T20442] dump_stack+0x15/0x24 [ 1805.553502][T20442] should_fail_ex+0x3d4/0x520 [ 1805.558199][T20442] ? security_inode_alloc+0x33/0x120 [ 1805.563588][T20442] __should_failslab+0xac/0xf0 [ 1805.568378][T20442] should_failslab+0x9/0x20 [ 1805.572902][T20442] kmem_cache_alloc+0x3b/0x330 [ 1805.577687][T20442] ? slab_pre_alloc_hook+0x30/0x1e0 [ 1805.583006][T20442] security_inode_alloc+0x33/0x120 [ 1805.588150][T20442] inode_init_always+0x6fc/0x960 [ 1805.593104][T20442] new_inode_pseudo+0xa2/0x1f0 [ 1805.597888][T20442] new_inode+0x28/0x1e0 [ 1805.602065][T20442] ? _raw_spin_lock+0x8e/0xe0 [ 1805.606785][T20442] shmem_get_inode+0x349/0xc20 [ 1805.611584][T20442] __shmem_file_setup+0x113/0x2b0 [ 1805.616632][T20442] shmem_file_setup+0x2f/0x40 [ 1805.621330][T20442] __se_sys_memfd_create+0x1e6/0x3b0 [ 1805.626636][T20442] __x64_sys_memfd_create+0x5b/0x70 [ 1805.631941][T20442] x64_sys_call+0x235/0x9a0 [ 1805.636562][T20442] do_syscall_64+0x4c/0xa0 [ 1805.641000][T20442] ? clear_bhb_loop+0x30/0x80 [ 1805.645707][T20442] ? clear_bhb_loop+0x30/0x80 [ 1805.650416][T20442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1805.656339][T20442] RIP: 0033:0x7f531ed8efc9 [ 1805.660781][T20442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1805.680491][T20442] RSP: 002b:00007f531fb7ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1805.689017][T20442] RAX: ffffffffffffffda RBX: 000000000000552a RCX: 00007f531ed8efc9 [ 1805.697023][T20442] RDX: 00007f531fb7eef0 RSI: 0000000000000000 RDI: 00007f531ee12960 [ 1805.705025][T20442] RBP: 0000200000001740 R08: 00007f531fb7ebb7 R09: 00007f531fb7ee40 [ 1805.713005][T20442] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 1805.721019][T20442] R13: 00007f531fb7eef0 R14: 00007f531fb7eeb0 R15: 0000200000000040 [ 1805.729006][T20442] [ 1805.982939][ T28] audit: type=1326 audit(1760830002.639:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531ed8efc9 code=0x7ffc0000 [ 1806.228529][ T28] audit: type=1326 audit(1760830002.659:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f531ed8efc9 code=0x7ffc0000 [ 1806.777332][ T28] audit: type=1326 audit(1760830002.659:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f531ed8f003 code=0x7ffc0000 [ 1806.917529][ T28] audit: type=1326 audit(1760830002.659:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f531ed8da7f code=0x7ffc0000 [ 1806.942369][ T28] audit: type=1326 audit(1760830002.669:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f531ed8f057 code=0x7ffc0000 [ 1806.966303][ T28] audit: type=1326 audit(1760830002.669:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f531ed8d810 code=0x7ffc0000 [ 1806.999880][ T28] audit: type=1326 audit(1760830002.669:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f531ed8dc2a code=0x7ffc0000 [ 1807.191261][T20477] netlink: 'syz.4.5334': attribute type 4 has an invalid length. [ 1807.205414][T20477] netlink: 'syz.4.5334': attribute type 4 has an invalid length. [ 1807.456068][T20478] tipc: Started in network mode [ 1807.461070][T20478] tipc: Node identity , cluster identity 4711 [ 1807.467229][T20478] tipc: Failed to set node id, please configure manually [ 1807.474619][T20478] tipc: Enabling of bearer rejected, failed to enable media [ 1808.777367][ T28] audit: type=1326 audit(1760830002.669:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531ed8efc9 code=0x7ffc0000 [ 1808.903771][ T28] audit: type=1326 audit(1760830002.669:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20451 comm="syz.3.5331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531ed8efc9 code=0x7ffc0000 [ 1809.064691][T20489] syz.4.5337[20489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1809.064770][T20489] syz.4.5337[20489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1809.077300][T20489] netlink: 'syz.4.5337': attribute type 4 has an invalid length. [ 1809.435099][T20490] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1809.442339][T20490] overlayfs: failed to set xattr on upper [ 1810.494227][T20497] tipc: Started in network mode [ 1810.499177][T20497] tipc: Node identity , cluster identity 4711 [ 1810.505335][T20497] tipc: Failed to set node id, please configure manually [ 1810.512515][T20497] tipc: Enabling of bearer rejected, failed to enable media [ 1810.926139][T20499] netlink: 'syz.1.5340': attribute type 4 has an invalid length. [ 1810.936813][T20499] netlink: 'syz.1.5340': attribute type 4 has an invalid length. [ 1813.223871][T20519] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1813.231092][T20519] overlayfs: failed to set xattr on upper [ 1814.490819][T20535] netlink: 'syz.4.5348': attribute type 4 has an invalid length. [ 1814.789989][T20529] netlink: 'syz.4.5348': attribute type 4 has an invalid length. [ 1816.590162][T20546] syz.3.5351[20546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1816.590246][T20546] syz.3.5351[20546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1817.009665][T20546] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5351'. [ 1821.320011][T20573] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1821.327024][T20573] overlayfs: failed to set xattr on upper [ 1821.947375][T20582] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1821.954438][T20582] overlayfs: failed to set xattr on upper [ 1822.516928][T20590] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1822.524265][T20590] overlayfs: failed to set xattr on upper [ 1822.876264][T20592] netlink: 'syz.9.5365': attribute type 4 has an invalid length. [ 1822.921497][T20592] netlink: 'syz.9.5365': attribute type 4 has an invalid length. [ 1822.957047][T17125] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1823.181078][T17125] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1823.193594][T17125] usb 2-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 1823.557864][T20606] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1823.565140][T20606] overlayfs: failed to set xattr on upper [ 1824.808909][T17125] usb 2-1: config 0 has no interface number 0 [ 1824.870364][T17125] usb 2-1: string descriptor 0 read error: -71 [ 1824.893939][T17125] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1824.913528][T17125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.977509][T17125] usb 2-1: config 0 descriptor?? [ 1824.982932][T17125] usb 2-1: can't set config #0, error -71 [ 1825.001403][T17125] usb 2-1: USB disconnect, device number 20 [ 1825.319634][T20620] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1825.327012][T20620] overlayfs: failed to set xattr on upper [ 1825.584524][T20620] overlayfs: filesystem on './bus' not supported as upperdir [ 1826.268029][T20634] netlink: 'syz.9.5378': attribute type 4 has an invalid length. [ 1826.278085][T20634] netlink: 'syz.9.5378': attribute type 4 has an invalid length. [ 1826.544423][T20647] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1826.551447][T20647] overlayfs: failed to set xattr on upper [ 1826.776122][T20652] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1826.783442][T20652] overlayfs: failed to set xattr on upper [ 1827.083136][T20652] overlayfs: filesystem on './bus' not supported as upperdir [ 1827.507502][ T28] audit: type=1326 audit(1760830024.159:951): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20655 comm="syz.1.5385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1762b8efc9 code=0x0 [ 1827.824205][T20660] netlink: 'syz.9.5384': attribute type 4 has an invalid length. [ 1828.949650][T20661] netlink: 'syz.9.5384': attribute type 4 has an invalid length. [ 1829.052513][ T28] audit: type=1400 audit(1760830025.709:952): avc: denied { execute } for pid=20664 comm="syz.3.5387" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1829.241141][ T28] audit: type=1400 audit(1760830025.819:953): avc: denied { execmem } for pid=20669 comm="syz.1.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1829.438233][ T28] audit: type=1400 audit(1760830026.049:954): avc: denied { prog_load } for pid=20664 comm="syz.3.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1829.479196][ T28] audit: type=1400 audit(1760830026.049:955): avc: denied { prog_run } for pid=20664 comm="syz.3.5387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1829.524966][ T28] audit: type=1400 audit(1760830026.049:956): avc: denied { ioctl } for pid=20664 comm="syz.3.5387" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=88399 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1829.632206][ T28] audit: type=1400 audit(1760830026.089:957): avc: denied { map_create } for pid=20669 comm="syz.1.5389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1829.662728][ T28] audit: type=1400 audit(1760830026.309:958): avc: denied { create } for pid=20678 comm="syz.4.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1829.686318][T20684] netlink: 'syz.9.5390': attribute type 4 has an invalid length. [ 1829.698987][T20684] netlink: 'syz.9.5390': attribute type 4 has an invalid length. [ 1829.771488][T20683] FAULT_INJECTION: forcing a failure. [ 1829.771488][T20683] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.813073][ T28] audit: type=1400 audit(1760830026.309:959): avc: denied { bind } for pid=20678 comm="syz.4.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1829.840309][T20688] netlink: 'syz.4.5392': attribute type 27 has an invalid length. [ 1829.848613][T20683] CPU: 0 PID: 20683 Comm: syz.8.5386 Not tainted syzkaller #0 [ 1829.856107][T20683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1829.866185][T20683] Call Trace: [ 1829.869568][T20683] [ 1829.872513][T20683] __dump_stack+0x21/0x24 [ 1829.876864][T20683] dump_stack_lvl+0xee/0x150 [ 1829.881475][T20683] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1829.886520][T20683] ? number+0xd1d/0xf70 [ 1829.890872][T20683] dump_stack+0x15/0x24 [ 1829.895069][T20683] should_fail_ex+0x3d4/0x520 [ 1829.899773][T20683] __should_failslab+0xac/0xf0 [ 1829.904561][T20683] ? sidtab_sid2str_get+0x120/0x2c0 [ 1829.909802][T20683] should_failslab+0x9/0x20 [ 1829.914321][T20683] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1829.919728][T20683] ? vsnprintf+0x186d/0x1960 [ 1829.924343][T20683] ? sidtab_sid2str_get+0x120/0x2c0 [ 1829.929566][T20683] __kmalloc_node_track_caller+0xa0/0x1e0 [ 1829.935322][T20683] ? skb_put+0x10e/0x1f0 [ 1829.939584][T20683] kmemdup+0x2b/0x60 [ 1829.943508][T20683] sidtab_sid2str_get+0x120/0x2c0 [ 1829.948556][T20683] security_sid_to_context_core+0x2ac/0x480 [ 1829.954569][T20683] security_sid_to_context+0x33/0x40 [ 1829.960325][T20683] avc_audit_post_callback+0x125/0x820 [ 1829.965812][T20683] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1829.971823][T20683] ? __cfi_audit_log_format+0x10/0x10 [ 1829.977230][T20683] ? audit_log_untrustedstring+0xe6/0x100 [ 1829.982983][T20683] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1829.988997][T20683] common_lsm_audit+0x12d7/0x16d0 [ 1829.994059][T20683] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 1830.000114][T20683] ? __cfi_common_lsm_audit+0x10/0x10 [ 1830.005601][T20683] ? avc_update_node+0x2c6/0xa00 [ 1830.010571][T20683] ? avc_denied+0x132/0x1b0 [ 1830.015110][T20683] slow_avc_audit+0x1ac/0x220 [ 1830.019817][T20683] ? __cfi_slow_avc_audit+0x10/0x10 [ 1830.025301][T20683] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1830.030848][T20683] selinux_capable+0x21d/0x380 [ 1830.035648][T20683] ? __cfi_selinux_capable+0x10/0x10 [ 1830.040971][T20683] ? proc_fail_nth_write+0x17a/0x1f0 [ 1830.046636][T20683] ? security_file_permission+0x8a/0xb0 [ 1830.052302][T20683] ? security_file_permission+0x94/0xb0 [ 1830.057877][T20683] ? cap_capable+0x1aa/0x230 [ 1830.062502][T20683] ? slab_free_freelist_hook+0xc2/0x190 [ 1830.068090][T20683] security_capable+0x89/0xc0 [ 1830.072808][T20683] capable+0x6d/0xe0 [ 1830.076737][T20683] __sys_bpf+0xa7/0x780 [ 1830.080917][T20683] ? bpf_link_show_fdinfo+0x320/0x320 [ 1830.086312][T20683] ? __cfi_ksys_write+0x10/0x10 [ 1830.091195][T20683] ? debug_smp_processor_id+0x17/0x20 [ 1830.096597][T20683] __x64_sys_bpf+0x7c/0x90 [ 1830.101048][T20683] x64_sys_call+0x488/0x9a0 [ 1830.105598][T20683] do_syscall_64+0x4c/0xa0 [ 1830.110031][T20683] ? clear_bhb_loop+0x30/0x80 [ 1830.114745][T20683] ? clear_bhb_loop+0x30/0x80 [ 1830.119452][T20683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1830.125366][T20683] RIP: 0033:0x7f305ab8efc9 [ 1830.129800][T20683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1830.149434][T20683] RSP: 002b:00007f305bab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1830.157875][T20683] RAX: ffffffffffffffda RBX: 00007f305ade5fa0 RCX: 00007f305ab8efc9 [ 1830.165866][T20683] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1830.173860][T20683] RBP: 00007f305bab1090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.181848][T20683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1830.189838][T20683] R13: 00007f305ade6038 R14: 00007f305ade5fa0 R15: 00007ffe58a87838 [ 1830.192725][ T28] audit: type=1400 audit(1760830026.319:960): avc: denied { setopt } for pid=20678 comm="syz.4.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1830.197850][T20683] [ 1831.264184][T20705] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1831.271251][T20705] overlayfs: failed to set xattr on upper [ 1832.604771][T20715] overlayfs: failed to resolve './file0': -2 [ 1832.659957][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 1832.659998][ T28] audit: type=1400 audit(1760830029.019:1042): avc: denied { bpf } for pid=20697 comm="syz.9.5397" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1832.866525][T20717] tipc: Started in network mode [ 1832.871561][T20717] tipc: Node identity 48, cluster identity 4711 [ 1832.877886][ T28] audit: type=1400 audit(1760830029.019:1043): avc: denied { prog_load } for pid=20697 comm="syz.9.5397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1832.898510][T20717] tipc: Node number set to 72 [ 1832.925673][ T28] audit: type=1400 audit(1760830029.029:1044): avc: denied { bpf } for pid=20697 comm="syz.9.5397" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1832.947191][ T28] audit: type=1400 audit(1760830029.029:1045): avc: denied { perfmon } for pid=20697 comm="syz.9.5397" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1832.985709][ T28] audit: type=1400 audit(1760830029.249:1046): avc: denied { map_create } for pid=20691 comm="syz.1.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1833.005588][ T28] audit: type=1400 audit(1760830029.249:1047): avc: denied { map_read map_write } for pid=20691 comm="syz.1.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1833.105634][T20727] netlink: 'syz.3.5400': attribute type 4 has an invalid length. [ 1833.117785][ T39] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1833.176710][T20727] netlink: 'syz.3.5400': attribute type 4 has an invalid length. [ 1833.531075][T20728] tipc: Started in network mode [ 1833.536045][T20728] tipc: Node identity , cluster identity 4711 [ 1833.542255][T20728] tipc: Failed to set node id, please configure manually [ 1833.549627][T20728] tipc: Enabling of bearer rejected, failed to enable media [ 1834.187397][ T28] audit: type=1400 audit(1760830029.259:1048): avc: denied { mac_admin } for pid=20691 comm="syz.1.5394" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1834.210192][ T28] audit: type=1400 audit(1760830029.259:1049): avc: denied { relabelto } for pid=20691 comm="syz.1.5394" name="489" dev="tmpfs" ino=2732 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1834.333161][ T28] audit: type=1400 audit(1760830029.259:1050): avc: denied { associate } for pid=20691 comm="syz.1.5394" name="489" dev="tmpfs" ino=2732 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 1834.865931][ T28] audit: type=1400 audit(1760830029.259:1051): avc: denied { mounton } for pid=20697 comm="syz.9.5397" path="/106/bus" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1835.054659][T20736] netlink: 'syz.8.5405': attribute type 4 has an invalid length. [ 1835.066930][T20736] netlink: 'syz.8.5405': attribute type 4 has an invalid length. [ 1835.382908][T20752] tipc: Started in network mode [ 1835.387947][T20752] tipc: Node identity , cluster identity 4711 [ 1835.394146][T20752] tipc: Failed to set node id, please configure manually [ 1835.401620][T20752] tipc: Enabling of bearer rejected, failed to enable media [ 1836.516503][T20761] overlayfs: failed to resolve './file0': -2 [ 1836.756367][T20762] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1836.763613][T20762] overlayfs: failed to set xattr on upper [ 1839.702675][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 1839.703248][ T28] audit: type=1400 audit(1760830032.979:1145): avc: denied { create } for pid=20754 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1840.263958][ T28] audit: type=1400 audit(1760830032.989:1146): avc: denied { write } for pid=20754 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1840.285525][ T28] audit: type=1400 audit(1760830032.999:1147): avc: denied { module_request } for pid=20754 comm="syz.1.5410" kmod="net-pf-16-proto-16-family-SMC_PNETID" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1840.362786][ T28] audit: type=1400 audit(1760830032.999:1148): avc: denied { read } for pid=20754 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1840.471504][T20772] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1840.478562][T20772] overlayfs: failed to set xattr on upper [ 1840.636394][ T28] audit: type=1400 audit(1760830033.089:1149): avc: denied { mounton } for pid=20754 comm="syz.1.5410" path="/493/file0" dev="tmpfs" ino=2759 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1840.659360][ T28] audit: type=1400 audit(1760830033.109:1150): avc: denied { mount } for pid=20754 comm="syz.1.5410" name="/" dev="ramfs" ino=88620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1840.682394][ T28] audit: type=1400 audit(1760830033.139:1151): avc: denied { remount } for pid=20754 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1840.730769][ T28] audit: type=1400 audit(1760830033.169:1152): avc: denied { mounton } for pid=20754 comm="syz.1.5410" path="/493/file0/bus" dev="ramfs" ino=88621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1840.757878][ T28] audit: type=1400 audit(1760830033.269:1153): avc: denied { remount } for pid=20754 comm="syz.1.5410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1840.779217][ T28] audit: type=1400 audit(1760830033.379:1154): avc: denied { mounton } for pid=20754 comm="syz.1.5410" path="/493/file0/file0" dev="ramfs" ino=88624 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1841.552464][T20777] tipc: Enabling of bearer rejected, already enabled [ 1841.932806][T20782] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1841.940214][T20782] overlayfs: failed to set xattr on upper [ 1842.175256][T20790] netlink: 'syz.3.5418': attribute type 4 has an invalid length. [ 1842.208497][T20790] netlink: 'syz.3.5418': attribute type 4 has an invalid length. [ 1842.243198][T20791] syz.1.5417[20791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1842.243613][T20791] syz.1.5417[20791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1842.313308][T20791] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5417'. [ 1842.971376][T20796] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5421'. [ 1844.799934][T20801] tipc: Started in network mode [ 1844.804832][T20801] tipc: Node identity , cluster identity 4711 [ 1844.810941][T20801] tipc: Failed to set node id, please configure manually [ 1844.817976][T20801] tipc: Enabling of bearer rejected, failed to enable media [ 1844.881239][T20808] tipc: Started in network mode [ 1844.886229][T20808] tipc: Node identity , cluster identity 4711 [ 1844.892523][T20808] tipc: Failed to set node id, please configure manually [ 1844.899816][T20808] tipc: Enabling of bearer rejected, failed to enable media [ 1844.989992][ T28] kauditd_printk_skb: 145 callbacks suppressed [ 1844.990014][ T28] audit: type=1400 audit(1760830041.259:1300): avc: denied { bpf } for pid=20799 comm="syz.1.5422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1845.146209][ T28] audit: type=1400 audit(1760830041.259:1301): avc: denied { create } for pid=20797 comm="syz.4.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1845.944652][T20815] FAULT_INJECTION: forcing a failure. [ 1845.944652][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 1845.949862][ T28] audit: type=1400 audit(1760830041.259:1302): avc: denied { map_create } for pid=20799 comm="syz.1.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1845.986750][T20815] CPU: 0 PID: 20815 Comm: syz.4.5426 Not tainted syzkaller #0 [ 1845.994252][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1846.004319][T20815] Call Trace: [ 1846.007700][T20815] [ 1846.010724][T20815] __dump_stack+0x21/0x24 [ 1846.015064][T20815] dump_stack_lvl+0xee/0x150 [ 1846.019744][T20815] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1846.024773][T20815] ? __kasan_kmalloc+0x95/0xb0 [ 1846.029543][T20815] dump_stack+0x15/0x24 [ 1846.033700][T20815] should_fail_ex+0x3d4/0x520 [ 1846.038384][T20815] ? build_skb+0x2a/0x220 [ 1846.042800][T20815] __should_failslab+0xac/0xf0 [ 1846.047567][T20815] should_failslab+0x9/0x20 [ 1846.052070][T20815] kmem_cache_alloc+0x3b/0x330 [ 1846.056843][T20815] build_skb+0x2a/0x220 [ 1846.061002][T20815] bpf_prog_test_run_skb+0x39f/0x1290 [ 1846.066483][T20815] ? __fget_files+0x2d5/0x330 [ 1846.071184][T20815] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 1846.077014][T20815] bpf_prog_test_run+0x3e3/0x630 [ 1846.081966][T20815] ? slab_free_freelist_hook+0xc2/0x190 [ 1846.087541][T20815] ? bpf_prog_query+0x270/0x270 [ 1846.092404][T20815] ? selinux_bpf+0xce/0xf0 [ 1846.096828][T20815] ? security_bpf+0x93/0xb0 [ 1846.101341][T20815] __sys_bpf+0x56d/0x780 [ 1846.105596][T20815] ? bpf_link_show_fdinfo+0x320/0x320 [ 1846.110976][T20815] ? __cfi_ksys_write+0x10/0x10 [ 1846.115844][T20815] ? debug_smp_processor_id+0x17/0x20 [ 1846.121229][T20815] __x64_sys_bpf+0x7c/0x90 [ 1846.125665][T20815] x64_sys_call+0x488/0x9a0 [ 1846.130171][T20815] do_syscall_64+0x4c/0xa0 [ 1846.134593][T20815] ? clear_bhb_loop+0x30/0x80 [ 1846.139287][T20815] ? clear_bhb_loop+0x30/0x80 [ 1846.143977][T20815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1846.149887][T20815] RIP: 0033:0x7f583618efc9 [ 1846.154326][T20815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.173935][T20815] RSP: 002b:00007f5837087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1846.182400][T20815] RAX: ffffffffffffffda RBX: 00007f58363e5fa0 RCX: 00007f583618efc9 [ 1846.190378][T20815] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 1846.198380][T20815] RBP: 00007f5837087090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.206368][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.214345][T20815] R13: 00007f58363e6038 R14: 00007f58363e5fa0 R15: 00007fff24624198 [ 1846.222411][T20815] [ 1846.229949][ T28] audit: type=1400 audit(1760830041.259:1303): avc: denied { perfmon } for pid=20799 comm="syz.1.5422" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1846.252129][ T28] audit: type=1400 audit(1760830041.269:1304): avc: denied { map_read map_write } for pid=20799 comm="syz.1.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1846.272535][ T28] audit: type=1400 audit(1760830041.359:1305): avc: denied { create } for pid=20797 comm="syz.4.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1846.293323][ T28] audit: type=1400 audit(1760830041.359:1306): avc: denied { write } for pid=20797 comm="syz.4.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1846.319908][ T28] audit: type=1400 audit(1760830041.359:1307): avc: denied { read } for pid=20797 comm="syz.4.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1846.395547][ T28] audit: type=1400 audit(1760830041.419:1308): avc: denied { bpf } for pid=20799 comm="syz.1.5422" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1846.416429][ T28] audit: type=1400 audit(1760830041.419:1309): avc: denied { prog_load } for pid=20799 comm="syz.1.5422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1847.363130][T20827] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1847.370338][T20827] overlayfs: failed to set xattr on upper [ 1848.139773][T20830] netlink: 'syz.4.5429': attribute type 4 has an invalid length. [ 1848.156218][T20830] netlink: 'syz.4.5429': attribute type 4 has an invalid length. [ 1849.403237][T20838] FAULT_INJECTION: forcing a failure. [ 1849.403237][T20838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.886374][T20844] syz.9.5432[20844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1849.886806][T20844] syz.9.5432[20844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1850.787300][T20843] netlink: 'syz.3.5434': attribute type 4 has an invalid length. [ 1850.807636][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 1850.923580][T20843] netlink: 'syz.3.5434': attribute type 4 has an invalid length. [ 1851.014039][T20844] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5432'. [ 1851.061560][ T28] audit: type=1400 audit(1760830046.079:1389): avc: denied { execmem } for pid=20836 comm="syz.3.5434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1851.428331][T20838] CPU: 1 PID: 20838 Comm: syz.1.5433 Not tainted syzkaller #0 [ 1851.435846][T20838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1851.445917][T20838] Call Trace: [ 1851.449222][T20838] [ 1851.452183][T20838] __dump_stack+0x21/0x24 [ 1851.456634][T20838] dump_stack_lvl+0xee/0x150 [ 1851.461243][T20838] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1851.466288][T20838] ? _parse_integer+0x2a/0x40 [ 1851.470991][T20838] dump_stack+0x15/0x24 [ 1851.475169][T20838] should_fail_ex+0x3d4/0x520 [ 1851.479888][T20838] should_fail+0xb/0x10 [ 1851.484068][T20838] should_fail_usercopy+0x1a/0x20 [ 1851.489202][T20838] _copy_from_user+0x1e/0xc0 [ 1851.493833][T20838] ___sys_sendmsg+0x155/0x290 [ 1851.498534][T20838] ? __sys_sendmsg+0x270/0x270 [ 1851.503324][T20838] ? __kasan_check_write+0x14/0x20 [ 1851.508456][T20838] ? proc_fail_nth_write+0x17a/0x1f0 [ 1851.513760][T20838] ? vfs_write+0x9d6/0xca0 [ 1851.518205][T20838] ? __fdget+0x19c/0x220 [ 1851.522463][T20838] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1851.527431][T20838] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1851.532916][T20838] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1851.539010][T20838] x64_sys_call+0x171/0x9a0 [ 1851.543552][T20838] do_syscall_64+0x4c/0xa0 [ 1851.547985][T20838] ? clear_bhb_loop+0x30/0x80 [ 1851.552703][T20838] ? clear_bhb_loop+0x30/0x80 [ 1851.557580][T20838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.563526][T20838] RIP: 0033:0x7f1762b8efc9 [ 1851.567960][T20838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1851.587674][T20838] RSP: 002b:00007f17639b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1851.596114][T20838] RAX: ffffffffffffffda RBX: 00007f1762de5fa0 RCX: 00007f1762b8efc9 [ 1851.605522][T20838] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1851.613521][T20838] RBP: 00007f17639b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.621529][T20838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.629526][T20838] R13: 00007f1762de6038 R14: 00007f1762de5fa0 R15: 00007ffe5dab3f58 [ 1851.637540][T20838] [ 1851.645359][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5433'. [ 1851.675811][ T28] audit: type=1400 audit(1760830046.539:1390): avc: denied { bpf } for pid=20834 comm="syz.9.5432" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1851.851342][ T28] audit: type=1400 audit(1760830046.539:1391): avc: denied { prog_load } for pid=20834 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1851.872148][ T28] audit: type=1400 audit(1760830046.539:1392): avc: denied { perfmon } for pid=20834 comm="syz.9.5432" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1852.219944][ T28] audit: type=1400 audit(1760830046.559:1393): avc: denied { prog_run } for pid=20834 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1852.239189][ T28] audit: type=1400 audit(1760830047.249:1394): avc: denied { create } for pid=20834 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1852.265987][ T28] audit: type=1400 audit(1760830047.249:1395): avc: denied { write } for pid=20834 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1852.308203][ T28] audit: type=1400 audit(1760830047.249:1396): avc: denied { read } for pid=20834 comm="syz.9.5432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1852.328769][T20861] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1852.335525][T20861] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1852.425343][T20866] tipc: Started in network mode [ 1852.430276][T20866] tipc: Node identity , cluster identity 4711 [ 1852.436362][T20866] tipc: Failed to set node id, please configure manually [ 1852.443441][T20866] tipc: Enabling of bearer rejected, failed to enable media [ 1852.886670][T20857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.929921][T20857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.940967][T20857] device bridge_slave_0 entered promiscuous mode [ 1852.978506][T20857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.985730][T20857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.999096][T20857] device bridge_slave_1 entered promiscuous mode [ 1854.184078][ T10] tipc: Left network mode [ 1854.302912][T20876] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1854.357392][T20876] overlayfs: failed to set xattr on upper [ 1854.408322][T20892] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1854.465479][T20892] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1854.488930][T20892] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1854.519293][T20892] overlayfs: failed to set xattr on upper [ 1855.811825][ T28] kauditd_printk_skb: 245 callbacks suppressed [ 1855.811843][ T28] audit: type=1400 audit(1760830052.469:1587): avc: denied { read } for pid=20857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1855.919588][T20905] netlink: 'syz.9.5446': attribute type 4 has an invalid length. [ 1855.960573][T20905] netlink: 'syz.9.5446': attribute type 4 has an invalid length. [ 1856.323883][ T10] device bridge_slave_1 left promiscuous mode [ 1856.331007][ T28] audit: type=1400 audit(1760830052.499:1588): avc: denied { write } for pid=20883 comm="syz.4.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1856.386524][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1856.452602][T20907] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5447'. [ 1856.483819][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.679150][ T10] device veth1_macvtap left promiscuous mode [ 1856.690309][ T28] audit: type=1400 audit(1760830052.499:1589): avc: denied { write } for pid=20883 comm="syz.4.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1856.820359][ T10] device veth0_vlan left promiscuous mode [ 1856.865279][ T28] audit: type=1400 audit(1760830052.559:1590): avc: denied { bpf } for pid=20899 comm="syz.9.5446" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1856.886208][ T28] audit: type=1400 audit(1760830052.599:1591): avc: denied { map_create } for pid=20899 comm="syz.9.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1857.117569][ T28] audit: type=1400 audit(1760830052.599:1592): avc: denied { map_read map_write } for pid=20899 comm="syz.9.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1857.175499][ T28] audit: type=1400 audit(1760830052.609:1593): avc: denied { bpf } for pid=20899 comm="syz.9.5446" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1857.271216][ T28] audit: type=1400 audit(1760830052.709:1594): avc: denied { write } for pid=20883 comm="syz.4.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1857.305884][ T28] audit: type=1400 audit(1760830052.789:1595): avc: denied { write } for pid=20883 comm="syz.4.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1857.326818][ T28] audit: type=1400 audit(1760830052.829:1596): avc: denied { write } for pid=20883 comm="syz.4.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1857.414257][T20914] tipc: Enabling of bearer rejected, already enabled [ 1857.426269][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1857.434400][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1857.445533][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1857.454291][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1857.462794][T16944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.470003][T16944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1857.478540][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1857.530206][T20926] syz.4.5448[20926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1857.530297][T20926] syz.4.5448[20926] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1857.576831][T20926] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5448'. [ 1857.602762][T20857] device veth0_vlan entered promiscuous mode [ 1857.609939][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1857.639689][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1858.480870][T16944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1858.488000][T16944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1858.496345][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1858.505386][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1858.527829][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1858.560897][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1858.570176][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1858.612381][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1858.621127][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1858.629485][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1858.639012][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1858.650110][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1859.610808][T20938] tipc: Enabling of bearer rejected, already enabled [ 1859.625698][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1859.674842][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1859.698636][T20857] device veth1_macvtap entered promiscuous mode [ 1859.707317][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1859.817705][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1859.837113][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1859.888976][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1859.899110][T16944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1860.408394][T20955] syz.9.5456[20955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.408473][T20955] syz.9.5456[20955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1861.425381][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 1861.425411][ T28] audit: type=1400 audit(1760830058.069:1776): avc: denied { create } for pid=20945 comm="syz.9.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1861.689698][ T28] audit: type=1400 audit(1760830058.299:1777): avc: denied { execmem } for pid=20952 comm="syz.1.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1861.866236][T20963] tipc: Started in network mode [ 1861.871196][T20963] tipc: Node identity , cluster identity 4711 [ 1861.877305][T20963] tipc: Failed to set node id, please configure manually [ 1861.884480][T20963] tipc: Enabling of bearer rejected, failed to enable media [ 1861.949877][ T28] audit: type=1400 audit(1760830058.479:1778): avc: denied { bpf } for pid=20952 comm="syz.1.5457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1862.018380][ T28] audit: type=1400 audit(1760830058.479:1779): avc: denied { map_create } for pid=20952 comm="syz.1.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1862.065173][ T28] audit: type=1400 audit(1760830058.489:1780): avc: denied { perfmon } for pid=20952 comm="syz.1.5457" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1862.180781][ T28] audit: type=1400 audit(1760830058.489:1781): avc: denied { map_read map_write } for pid=20952 comm="syz.1.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1862.201503][ T28] audit: type=1400 audit(1760830058.499:1782): avc: denied { bpf } for pid=20952 comm="syz.1.5457" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1862.239859][ T28] audit: type=1400 audit(1760830058.499:1783): avc: denied { prog_load } for pid=20952 comm="syz.1.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1863.289491][T20973] tipc: Started in network mode [ 1863.294496][T20973] tipc: Node identity , cluster identity 4711 [ 1863.300683][T20973] tipc: Failed to set node id, please configure manually [ 1863.307893][T20973] tipc: Enabling of bearer rejected, failed to enable media [ 1863.454227][T20977] netlink: 'syz.3.5459': attribute type 4 has an invalid length. [ 1863.503245][T20978] netlink: 'syz.3.5459': attribute type 4 has an invalid length. [ 1863.775557][ T28] audit: type=1400 audit(1760830058.499:1784): avc: denied { prog_run } for pid=20952 comm="syz.1.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1864.339500][T20985] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1866.448664][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 1866.448692][ T28] audit: type=1400 audit(1760830063.099:1913): avc: denied { create } for pid=21000 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1866.945602][T21009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21009 comm=syz.4.5469 [ 1866.961577][ T28] audit: type=1400 audit(1760830063.139:1914): avc: denied { connect } for pid=21000 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1866.983778][ T28] audit: type=1400 audit(1760830063.139:1915): avc: denied { write } for pid=21000 comm="syz.3.5470" path="socket:[90224]" dev="sockfs" ino=90224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1867.125610][ T28] audit: type=1400 audit(1760830063.289:1916): avc: denied { execmem } for pid=20999 comm="syz.4.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1867.147524][ T28] audit: type=1400 audit(1760830063.369:1917): avc: denied { write } for pid=21000 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1867.171610][ T28] audit: type=1400 audit(1760830063.379:1918): avc: denied { bpf } for pid=21000 comm="syz.3.5470" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1867.202440][ T28] audit: type=1400 audit(1760830063.379:1919): avc: denied { prog_load } for pid=21000 comm="syz.3.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1867.256114][ T28] audit: type=1400 audit(1760830063.389:1920): avc: denied { bpf } for pid=21005 comm="syz.6.5471" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1867.277405][ T28] audit: type=1400 audit(1760830063.389:1921): avc: denied { prog_load } for pid=21005 comm="syz.6.5471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1867.306666][ T359] device bridge_slave_1 left promiscuous mode [ 1867.313814][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.336603][ T28] audit: type=1400 audit(1760830063.389:1922): avc: denied { perfmon } for pid=21005 comm="syz.6.5471" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1867.861119][T21023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5475'. [ 1867.880560][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.920154][ T359] device veth1_macvtap left promiscuous mode [ 1867.939895][ T359] device veth0_vlan left promiscuous mode [ 1868.374094][T21021] tipc: Started in network mode [ 1868.378993][T21021] tipc: Node identity , cluster identity 4711 [ 1868.385180][T21021] tipc: Failed to set node id, please configure manually [ 1868.392306][T21021] tipc: Enabling of bearer rejected, failed to enable media [ 1868.412241][T21031] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1868.419237][T21031] overlayfs: failed to set xattr on upper [ 1868.513339][T21037] syz.9.5476[21037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1868.513423][T21037] syz.9.5476[21037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1868.578611][T21037] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5476'. [ 1869.090681][T21043] syz.3.5479[21043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1869.090848][T21043] syz.3.5479[21043] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1870.063491][T21043] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1871.464023][ T28] kauditd_printk_skb: 159 callbacks suppressed [ 1871.464127][ T28] audit: type=1400 audit(1760830068.019:2082): avc: denied { execmem } for pid=21056 comm="syz.3.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1871.622142][T21059] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1871.629120][T21059] overlayfs: failed to set xattr on upper [ 1871.978407][ T28] audit: type=1400 audit(1760830068.269:2083): avc: denied { bpf } for pid=21056 comm="syz.3.5483" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1872.102688][T21063] netlink: 'syz.6.5481': attribute type 4 has an invalid length. [ 1872.116140][T21063] netlink: 'syz.6.5481': attribute type 4 has an invalid length. [ 1872.221988][ T28] audit: type=1400 audit(1760830068.269:2084): avc: denied { prog_load } for pid=21056 comm="syz.3.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1872.259892][ T28] audit: type=1400 audit(1760830068.269:2085): avc: denied { perfmon } for pid=21056 comm="syz.3.5483" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1872.346505][ T28] audit: type=1400 audit(1760830068.269:2086): avc: denied { create } for pid=21056 comm="syz.3.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1872.441075][ T28] audit: type=1400 audit(1760830068.269:2087): avc: denied { write } for pid=21056 comm="syz.3.5483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1872.590646][ T28] audit: type=1400 audit(1760830068.269:2088): avc: denied { module_request } for pid=21056 comm="syz.3.5483" kmod="net-pf-16-proto-16-family-SMC_PNETID" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1872.646214][T21064] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1872.665156][T21064] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 1872.682364][T21064] audit: backlog limit exceeded [ 1872.690609][ T43] kworker/dying (43) used greatest stack depth: 19504 bytes left [ 1872.899855][T16825] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1873.147002][T16825] usb 5-1: Using ep0 maxpacket: 16 [ 1873.246049][T16825] usb 5-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 1873.352171][T16825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1873.425997][T16825] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 1873.457613][T16825] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1873.581377][T16825] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1873.598623][T16825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.614856][T16825] usb 5-1: Product: syz [ 1873.623135][T16825] usb 5-1: Manufacturer: syz [ 1874.346443][T21084] tipc: Started in network mode [ 1874.351402][T21084] tipc: Node identity , cluster identity 4711 [ 1874.357518][T21084] tipc: Failed to set node id, please configure manually [ 1874.364638][T21084] tipc: Enabling of bearer rejected, failed to enable media [ 1874.441779][T16825] usb 5-1: SerialNumber: syz [ 1874.598281][T21093] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5492'. [ 1874.630834][T21095] FAULT_INJECTION: forcing a failure. [ 1874.630834][T21095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.644088][T21095] CPU: 0 PID: 21095 Comm: syz.9.5493 Not tainted syzkaller #0 [ 1874.651580][T21095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1874.661782][T21095] Call Trace: [ 1874.665094][T21095] [ 1874.668047][T21095] __dump_stack+0x21/0x24 [ 1874.672402][T21095] dump_stack_lvl+0xee/0x150 [ 1874.677021][T21095] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1874.682068][T21095] dump_stack+0x15/0x24 [ 1874.686419][T21095] should_fail_ex+0x3d4/0x520 [ 1874.691225][T21095] should_fail+0xb/0x10 [ 1874.695415][T21095] should_fail_usercopy+0x1a/0x20 [ 1874.700558][T21095] _copy_from_user+0x1e/0xc0 [ 1874.705171][T21095] ___sys_sendmsg+0x155/0x290 [ 1874.709872][T21095] ? __sys_sendmsg+0x270/0x270 [ 1874.714669][T21095] ? kstrtouint+0x74/0xe0 [ 1874.719122][T21095] ? __fdget+0x19c/0x220 [ 1874.723467][T21095] __sys_sendmmsg+0x274/0x460 [ 1874.728171][T21095] ? slab_free_freelist_hook+0xc2/0x190 [ 1874.733802][T21095] ? __cfi___sys_sendmmsg+0x10/0x10 [ 1874.739045][T21095] ? __cfi_ksys_write+0x10/0x10 [ 1874.743936][T21095] __x64_sys_sendmmsg+0xa0/0xb0 [ 1874.748914][T21095] x64_sys_call+0x3f5/0x9a0 [ 1874.753455][T21095] do_syscall_64+0x4c/0xa0 [ 1874.757890][T21095] ? clear_bhb_loop+0x30/0x80 [ 1874.762597][T21095] ? clear_bhb_loop+0x30/0x80 [ 1874.767297][T21095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.773213][T21095] RIP: 0033:0x7f17c098efc9 [ 1874.777643][T21095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1874.797291][T21095] RSP: 002b:00007f17c185e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1874.805823][T21095] RAX: ffffffffffffffda RBX: 00007f17c0be5fa0 RCX: 00007f17c098efc9 [ 1874.813113][T21089] syz.1.5490[21089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1874.813904][T21095] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1874.813923][T21095] RBP: 00007f17c185e090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.825421][T21089] syz.1.5490[21089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1874.833265][T21095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.833283][T21095] R13: 00007f17c0be6038 R14: 00007f17c0be5fa0 R15: 00007fffaa434048 [ 1874.833303][T21095] [ 1874.879282][T21089] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5490'. [ 1875.084198][T21103] syz.9.5494[21103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1875.084772][T21103] syz.9.5494[21103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1875.157532][T21103] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5494'. [ 1877.495144][T16825] usb 5-1: 0:2 : does not exist [ 1877.510737][ T28] kauditd_printk_skb: 186 callbacks suppressed [ 1877.510860][ T28] audit: type=1400 audit(1760830072.839:2275): avc: denied { create } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1877.706753][T16825] usb 5-1: USB disconnect, device number 30 [ 1877.894471][ T28] audit: type=1400 audit(1760830072.839:2276): avc: denied { create } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1877.959779][ T28] audit: type=1400 audit(1760830073.439:2277): avc: denied { bpf } for pid=21105 comm="syz.6.5496" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1877.986154][ T28] audit: type=1400 audit(1760830073.439:2278): avc: denied { map_create } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1878.006404][ T28] audit: type=1400 audit(1760830073.439:2279): avc: denied { perfmon } for pid=21105 comm="syz.6.5496" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1878.027846][ T28] audit: type=1400 audit(1760830073.439:2280): avc: denied { map_read map_write } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1878.048175][ T28] audit: type=1400 audit(1760830073.539:2281): avc: denied { prog_load } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1878.097552][T21075] udevd[21075]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1878.158902][ T28] audit: type=1400 audit(1760830073.819:2282): avc: denied { prog_run } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1878.394694][T21127] overlayfs: workdir and upperdir must reside under the same mount [ 1878.492528][ T28] audit: type=1400 audit(1760830074.029:2283): avc: denied { create } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1878.514860][T21126] overlayfs: workdir and upperdir must reside under the same mount [ 1878.540783][ T28] audit: type=1400 audit(1760830074.129:2284): avc: denied { write } for pid=21105 comm="syz.6.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1878.593203][T21116] FAULT_INJECTION: forcing a failure. [ 1878.593203][T21116] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.646593][T21116] CPU: 1 PID: 21116 Comm: syz.4.5499 Not tainted syzkaller #0 [ 1878.654194][T21116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1878.664264][T21116] Call Trace: [ 1878.667544][T21116] [ 1878.670567][T21116] __dump_stack+0x21/0x24 [ 1878.674907][T21116] dump_stack_lvl+0xee/0x150 [ 1878.679503][T21116] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1878.685138][T21116] ? memset+0x35/0x40 [ 1878.689210][T21116] dump_stack+0x15/0x24 [ 1878.693425][T21116] should_fail_ex+0x3d4/0x520 [ 1878.698108][T21116] ? getname_flags+0xb9/0x500 [ 1878.702813][T21116] __should_failslab+0xac/0xf0 [ 1878.707586][T21116] should_failslab+0x9/0x20 [ 1878.712124][T21116] kmem_cache_alloc+0x3b/0x330 [ 1878.716896][T21116] getname_flags+0xb9/0x500 [ 1878.721418][T21116] __x64_sys_unlinkat+0xb0/0xf0 [ 1878.726275][T21116] x64_sys_call+0x79f/0x9a0 [ 1878.730788][T21116] do_syscall_64+0x4c/0xa0 [ 1878.735205][T21116] ? clear_bhb_loop+0x30/0x80 [ 1878.739890][T21116] ? clear_bhb_loop+0x30/0x80 [ 1878.744665][T21116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1878.750566][T21116] RIP: 0033:0x7f583618efc9 [ 1878.755069][T21116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1878.774677][T21116] RSP: 002b:00007f5837087038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 1878.783098][T21116] RAX: ffffffffffffffda RBX: 00007f58363e5fa0 RCX: 00007f583618efc9 [ 1878.791072][T21116] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: ffffffffffffff9c [ 1878.799055][T21116] RBP: 00007f5837087090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.807039][T21116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1878.815017][T21116] R13: 00007f58363e6038 R14: 00007f58363e5fa0 R15: 00007fff24624198 [ 1878.822995][T21116] [ 1879.272624][T21136] tipc: Started in network mode [ 1879.277524][T21136] tipc: Node identity , cluster identity 4711 [ 1879.283732][T21136] tipc: Failed to set node id, please configure manually [ 1879.290789][T21136] tipc: Enabling of bearer rejected, failed to enable media [ 1879.705769][T21138] tmpfs: Unknown parameter 'nolazytime/binder0' [ 1880.011182][T21153] syz.3.5507[21153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1880.012789][T21153] syz.3.5507[21153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1880.281543][T21153] netlink: 'syz.3.5507': attribute type 4 has an invalid length. [ 1880.385598][T21153] netlink: 'syz.3.5507': attribute type 4 has an invalid length. [ 1881.071392][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1881.108381][T21162] FAULT_INJECTION: forcing a failure. [ 1881.108381][T21162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.121634][T21162] CPU: 1 PID: 21162 Comm: syz.4.5510 Not tainted syzkaller #0 [ 1881.129121][T21162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1881.139217][T21162] Call Trace: [ 1881.142519][T21162] [ 1881.145476][T21162] __dump_stack+0x21/0x24 [ 1881.149833][T21162] dump_stack_lvl+0xee/0x150 [ 1881.154444][T21162] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1881.159497][T21162] ? _parse_integer+0x2a/0x40 [ 1881.164198][T21162] dump_stack+0x15/0x24 [ 1881.168377][T21162] should_fail_ex+0x3d4/0x520 [ 1881.173514][T21162] should_fail+0xb/0x10 [ 1881.177691][T21162] should_fail_usercopy+0x1a/0x20 [ 1881.182758][T21162] _copy_from_user+0x1e/0xc0 [ 1881.187368][T21162] ___sys_sendmsg+0x155/0x290 [ 1881.192414][T21162] ? __sys_sendmsg+0x270/0x270 [ 1881.197208][T21162] ? __kasan_check_write+0x14/0x20 [ 1881.202335][T21162] ? proc_fail_nth_write+0x17a/0x1f0 [ 1881.207814][T21162] ? vfs_write+0x9d6/0xca0 [ 1881.212274][T21162] ? __fdget+0x19c/0x220 [ 1881.216531][T21162] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1881.221487][T21162] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1881.226975][T21162] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1881.233062][T21162] x64_sys_call+0x171/0x9a0 [ 1881.237599][T21162] do_syscall_64+0x4c/0xa0 [ 1881.242036][T21162] ? clear_bhb_loop+0x30/0x80 [ 1881.246741][T21162] ? clear_bhb_loop+0x30/0x80 [ 1881.251454][T21162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1881.257375][T21162] RIP: 0033:0x7f583618efc9 [ 1881.261813][T21162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1881.281533][T21162] RSP: 002b:00007f5837087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1881.289979][T21162] RAX: ffffffffffffffda RBX: 00007f58363e5fa0 RCX: 00007f583618efc9 [ 1881.297978][T21162] RDX: 0000000004040094 RSI: 0000200000001540 RDI: 0000000000000006 [ 1881.305975][T21162] RBP: 00007f5837087090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.313972][T21162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.321957][T21162] R13: 00007f58363e6038 R14: 00007f58363e5fa0 R15: 00007fff24624198 [ 1881.329950][T21162] [ 1881.395120][T21166] syz.9.5505[21166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1881.395199][T21166] syz.9.5505[21166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1881.428668][T21166] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5505'. [ 1881.430026][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1881.518803][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.564308][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.649908][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1881.659002][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.699976][ T24] usb 2-1: config 0 descriptor?? [ 1881.711517][ T24] hub 2-1:0.0: USB hub found [ 1881.849845][T16825] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1881.986246][ T24] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1882.049833][T16825] usb 4-1: Using ep0 maxpacket: 8 [ 1882.056084][T16825] usb 4-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1882.080598][T16825] usb 4-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1882.110621][T16825] usb 4-1: config 32 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1882.129848][T16825] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1882.139034][T16825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.192935][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 1882.198991][ T24] usbhid: probe of 2-1:0.0 failed with error -71 [ 1882.290595][ T24] usb 2-1: USB disconnect, device number 21 [ 1882.425431][T16825] usb 4-1: string descriptor 0 read error: -71 [ 1882.433415][T16825] hub 4-1:32.0: Invalid hub with more than one config or interface [ 1882.441912][T16825] hub: probe of 4-1:32.0 failed with error -22 [ 1882.459646][T16825] usb 4-1: USB disconnect, device number 20 [ 1882.600632][ T28] kauditd_printk_skb: 265 callbacks suppressed [ 1882.600697][ T28] audit: type=1400 audit(1760830079.189:2550): avc: denied { bpf } for pid=21178 comm="syz.4.5514" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1882.653910][T21184] FAULT_INJECTION: forcing a failure. [ 1882.653910][T21184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.708300][ T28] audit: type=1400 audit(1760830079.189:2551): avc: denied { map_create } for pid=21178 comm="syz.4.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.734979][T21075] udevd[21075]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1882.777079][T21184] CPU: 0 PID: 21184 Comm: syz.9.5516 Not tainted syzkaller #0 [ 1882.777823][ T28] audit: type=1400 audit(1760830079.189:2552): avc: denied { map_read map_write } for pid=21178 comm="syz.4.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.784621][T21184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1882.784637][T21184] Call Trace: [ 1882.784644][T21184] [ 1882.784651][T21184] __dump_stack+0x21/0x24 [ 1882.784678][T21184] dump_stack_lvl+0xee/0x150 [ 1882.784699][T21184] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1882.834925][T21184] ? _parse_integer+0x2a/0x40 [ 1882.839644][T21184] dump_stack+0x15/0x24 [ 1882.843822][T21184] should_fail_ex+0x3d4/0x520 [ 1882.848532][T21184] should_fail+0xb/0x10 [ 1882.852721][T21184] should_fail_usercopy+0x1a/0x20 [ 1882.857785][T21184] _copy_from_user+0x1e/0xc0 [ 1882.862403][T21184] ___sys_sendmsg+0x155/0x290 [ 1882.867116][T21184] ? __sys_sendmsg+0x270/0x270 [ 1882.871914][T21184] ? __cfi___switch_to+0x10/0x10 [ 1882.876906][T21184] ? __fdget+0x19c/0x220 [ 1882.881175][T21184] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1882.886156][T21184] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1882.891654][T21184] x64_sys_call+0x171/0x9a0 [ 1882.893033][ T28] audit: type=1400 audit(1760830079.199:2553): avc: denied { prog_load } for pid=21178 comm="syz.4.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1882.896199][T21184] do_syscall_64+0x4c/0xa0 [ 1882.896227][T21184] ? clear_bhb_loop+0x30/0x80 [ 1882.924412][T21184] ? clear_bhb_loop+0x30/0x80 [ 1882.929127][T21184] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1882.935049][T21184] RIP: 0033:0x7f17c098efc9 [ 1882.939586][T21184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1882.959221][T21184] RSP: 002b:00007f17c185e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1882.961091][ T28] audit: type=1400 audit(1760830079.199:2554): avc: denied { perfmon } for pid=21178 comm="syz.4.5514" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1882.967667][T21184] RAX: ffffffffffffffda RBX: 00007f17c0be5fa0 RCX: 00007f17c098efc9 [ 1882.967687][T21184] RDX: 0000000000000000 RSI: 0000200000009500 RDI: 0000000000000004 [ 1882.967702][T21184] RBP: 00007f17c185e090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.012816][T21184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1883.020903][T21184] R13: 00007f17c0be6038 R14: 00007f17c0be5fa0 R15: 00007fffaa434048 [ 1883.028911][T21184] [ 1883.029493][ T28] audit: type=1400 audit(1760830079.199:2555): avc: denied { prog_run } for pid=21178 comm="syz.4.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1883.056926][ T28] audit: type=1400 audit(1760830079.709:2556): avc: denied { create } for pid=21186 comm="syz.1.5517" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1883.092484][ T28] audit: type=1400 audit(1760830079.709:2557): avc: denied { ioctl } for pid=21186 comm="syz.1.5517" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89598 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1883.119531][ T28] audit: type=1400 audit(1760830079.709:2558): avc: denied { read } for pid=21186 comm="syz.1.5517" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1883.290026][ T28] audit: type=1400 audit(1760830079.809:2559): avc: denied { execmem } for pid=21188 comm="syz.9.5518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1884.457719][T21213] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1884.464837][T21213] overlayfs: failed to set xattr on upper [ 1885.187991][T21221] overlayfs: workdir and upperdir must reside under the same mount [ 1885.307822][T21219] overlayfs: workdir and upperdir must reside under the same mount [ 1885.850654][T21239] netlink: 'syz.1.5526': attribute type 4 has an invalid length. [ 1885.943993][T21239] netlink: 'syz.1.5526': attribute type 4 has an invalid length. [ 1887.677327][T21253] netlink: 'syz.1.5531': attribute type 4 has an invalid length. [ 1887.709925][ T28] kauditd_printk_skb: 174 callbacks suppressed [ 1887.709942][ T28] audit: type=1400 audit(1760830084.309:2734): avc: denied { bpf } for pid=21243 comm="syz.1.5531" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1887.736994][T21253] netlink: 'syz.1.5531': attribute type 4 has an invalid length. [ 1887.892026][ T28] audit: type=1400 audit(1760830084.309:2735): avc: denied { prog_load } for pid=21243 comm="syz.1.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1888.337573][T21261] tipc: Started in network mode [ 1888.342584][T21261] tipc: Node identity , cluster identity 4711 [ 1888.348712][T21261] tipc: Failed to set node id, please configure manually [ 1888.356209][T21261] tipc: Enabling of bearer rejected, failed to enable media [ 1888.763159][ T28] audit: type=1400 audit(1760830084.359:2736): avc: denied { bpf } for pid=21243 comm="syz.1.5531" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1888.785715][ T28] audit: type=1400 audit(1760830084.359:2737): avc: denied { map_create } for pid=21243 comm="syz.1.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1888.846565][ T28] audit: type=1400 audit(1760830084.359:2738): avc: denied { map_read map_write } for pid=21243 comm="syz.1.5531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1888.887596][ T28] audit: type=1400 audit(1760830084.409:2739): avc: denied { bpf } for pid=21237 comm="syz.4.5529" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1888.908537][ T28] audit: type=1400 audit(1760830084.409:2740): avc: denied { prog_load } for pid=21237 comm="syz.4.5529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1888.929885][ T28] audit: type=1400 audit(1760830084.409:2741): avc: denied { perfmon } for pid=21237 comm="syz.4.5529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1888.983153][ T28] audit: type=1400 audit(1760830084.419:2742): avc: denied { execmem } for pid=21249 comm="syz.6.5532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1889.463756][T21274] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1889.471137][T21274] overlayfs: failed to set xattr on upper [ 1890.092205][T11121] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1890.185699][T11348] ------------[ cut here ]------------ [ 1890.191377][T11348] WARNING: CPU: 0 PID: 11348 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 1890.199601][T11348] Modules linked in: [ 1890.203597][T11348] CPU: 0 PID: 11348 Comm: syz-executor Not tainted syzkaller #0 [ 1890.211293][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.221516][T11348] RIP: 0010:drop_nlink+0xc5/0x110 [ 1890.226614][T11348] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1890.246601][T11348] RSP: 0018:ffffc90002687c38 EFLAGS: 00010293 [ 1890.253378][T11348] RAX: ffffffff81c3ab85 RBX: ffff888117f88fa0 RCX: ffff888115005100 [ 1890.261653][T11348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1890.269898][T11348] RBP: ffffc90002687c60 R08: 0000000000000004 R09: 0000000000000003 [ 1890.277914][T11348] R10: fffff520004d0f78 R11: 1ffff920004d0f78 R12: dffffc0000000000 [ 1890.285963][T11348] R13: 1ffff11022ff11fd R14: ffff888117f88fe8 R15: 0000000000000000 [ 1890.294099][T11348] FS: 0000555564e0f500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1890.303158][T11348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1890.309808][T11348] CR2: 0000555564e324e8 CR3: 000000012761c000 CR4: 00000000003506b0 [ 1890.317827][T11348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1890.325871][T11348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1890.334114][T11348] Call Trace: [ 1890.337562][T11348] [ 1890.340702][T11348] shmem_rmdir+0x5b/0x90 [ 1890.345188][T11348] vfs_rmdir+0x393/0x500 [ 1890.349577][T11348] incfs_kill_sb+0x105/0x220 [ 1890.354334][T11348] deactivate_locked_super+0xb5/0x120 [ 1890.359772][T11348] deactivate_super+0xaf/0xe0 [ 1890.364524][T11348] cleanup_mnt+0x45f/0x4e0 [ 1890.368993][T11348] __cleanup_mnt+0x19/0x20 [ 1890.373489][T11348] task_work_run+0x1db/0x240 [ 1890.378122][T11348] ? __cfi_task_work_run+0x10/0x10 [ 1890.383324][T11348] ? __x64_sys_umount+0x125/0x160 [ 1890.388565][T11348] ? __cfi___x64_sys_umount+0x10/0x10 [ 1890.394040][T11348] exit_to_user_mode_loop+0x9b/0xb0 [ 1890.399280][T11348] exit_to_user_mode_prepare+0x5a/0xa0 [ 1890.404834][T11348] syscall_exit_to_user_mode+0x1a/0x30 [ 1890.410356][T11348] do_syscall_64+0x58/0xa0 [ 1890.414820][T11348] ? clear_bhb_loop+0x30/0x80 [ 1890.419559][T11348] ? clear_bhb_loop+0x30/0x80 [ 1890.424337][T11348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1890.430430][T11348] RIP: 0033:0x7f531ed902f7 [ 1890.434968][T11348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1890.456230][T11348] RSP: 002b:00007ffeadef64d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1890.464733][T11348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f531ed902f7 [ 1890.473084][T11348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeadef6590 [ 1890.481269][T11348] RBP: 00007ffeadef6590 R08: 0000000000000000 R09: 0000000000000000 [ 1890.495735][T11348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeadef7620 [ 1890.503785][T11348] R13: 00007f531ee11d7d R14: 00000000001cd766 R15: 00007ffeadef7660 [ 1890.511908][T11348] [ 1890.514949][T11348] ---[ end trace 0000000000000000 ]--- [ 1890.529238][T11348] ================================================================== [ 1890.537357][T11348] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1890.543637][T11348] Write of size 4 at addr 0000000000000170 by task syz-executor/11348 [ 1890.551814][T11348] [ 1890.554160][T11348] CPU: 0 PID: 11348 Comm: syz-executor Tainted: G W syzkaller #0 [ 1890.563298][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.573465][T11348] Call Trace: [ 1890.576862][T11348] [ 1890.579824][T11348] __dump_stack+0x21/0x24 [ 1890.584288][T11348] dump_stack_lvl+0xee/0x150 [ 1890.588902][T11348] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1890.593937][T11348] ? ihold+0x20/0x60 [ 1890.597933][T11348] ? ihold+0x20/0x60 [ 1890.601850][T11348] print_report+0x3d/0x60 [ 1890.606240][T11348] kasan_report+0x122/0x150 [ 1890.610758][T11348] ? ihold+0x20/0x60 [ 1890.614665][T11348] kasan_check_range+0x280/0x290 [ 1890.619631][T11348] __kasan_check_write+0x14/0x20 [ 1890.624583][T11348] ihold+0x20/0x60 [ 1890.628311][T11348] vfs_rmdir+0x25f/0x500 [ 1890.632559][T11348] incfs_kill_sb+0x105/0x220 [ 1890.637163][T11348] deactivate_locked_super+0xb5/0x120 [ 1890.642555][T11348] deactivate_super+0xaf/0xe0 [ 1890.647251][T11348] cleanup_mnt+0x45f/0x4e0 [ 1890.651670][T11348] __cleanup_mnt+0x19/0x20 [ 1890.656115][T11348] task_work_run+0x1db/0x240 [ 1890.660721][T11348] ? __cfi_task_work_run+0x10/0x10 [ 1890.665845][T11348] ? __x64_sys_umount+0x125/0x160 [ 1890.670877][T11348] ? __cfi___x64_sys_umount+0x10/0x10 [ 1890.676267][T11348] exit_to_user_mode_loop+0x9b/0xb0 [ 1890.681477][T11348] exit_to_user_mode_prepare+0x5a/0xa0 [ 1890.687035][T11348] syscall_exit_to_user_mode+0x1a/0x30 [ 1890.692519][T11348] do_syscall_64+0x58/0xa0 [ 1890.696944][T11348] ? clear_bhb_loop+0x30/0x80 [ 1890.701659][T11348] ? clear_bhb_loop+0x30/0x80 [ 1890.706387][T11348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1890.712484][T11348] RIP: 0033:0x7f531ed902f7 [ 1890.716905][T11348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1890.736861][T11348] RSP: 002b:00007ffeadef64d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1890.745295][T11348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f531ed902f7 [ 1890.753273][T11348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeadef6590 [ 1890.761249][T11348] RBP: 00007ffeadef6590 R08: 0000000000000000 R09: 0000000000000000 [ 1890.769225][T11348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeadef7620 [ 1890.777206][T11348] R13: 00007f531ee11d7d R14: 00000000001cd766 R15: 00007ffeadef7660 [ 1890.785199][T11348] [ 1890.788223][T11348] ================================================================== [ 1890.798467][T21288] syz.9.5539[21288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1890.798545][T21288] syz.9.5539[21288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1890.848404][T11348] Disabling lock debugging due to kernel taint [ 1890.867232][T11348] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1890.875077][T11348] #PF: supervisor write access in kernel mode [ 1890.881604][T11348] #PF: error_code(0x0002) - not-present page [ 1890.887621][T11348] PGD 1242fd067 P4D 1242fd067 PUD 0 [ 1890.892954][T11348] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1890.898201][T11348] CPU: 1 PID: 11348 Comm: syz-executor Tainted: G B W syzkaller #0 [ 1890.907427][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1890.917607][T11348] RIP: 0010:ihold+0x26/0x60 [ 1890.922198][T11348] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 1890.941845][T11348] RSP: 0018:ffffc90002687c78 EFLAGS: 00010246 [ 1890.947943][T11348] RAX: ffff888115005100 RBX: 0000000000000000 RCX: ffff888115005100 [ 1890.955945][T11348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1890.963945][T11348] RBP: ffffc90002687c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 1890.972037][T11348] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888117f88fac [ 1890.980477][T11348] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1890.988479][T11348] FS: 0000555564e0f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1890.997530][T11348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1891.004147][T11348] CR2: 0000000000000170 CR3: 000000012761c000 CR4: 00000000003506a0 [ 1891.012151][T11348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1891.020153][T11348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1891.028309][T11348] Call Trace: [ 1891.031611][T11348] [ 1891.034565][T11348] vfs_rmdir+0x25f/0x500 [ 1891.038841][T11348] incfs_kill_sb+0x105/0x220 [ 1891.043476][T11348] deactivate_locked_super+0xb5/0x120 [ 1891.048887][T11348] deactivate_super+0xaf/0xe0 [ 1891.053601][T11348] cleanup_mnt+0x45f/0x4e0 [ 1891.058051][T11348] __cleanup_mnt+0x19/0x20 [ 1891.062500][T11348] task_work_run+0x1db/0x240 [ 1891.067107][T11348] ? __cfi_task_work_run+0x10/0x10 [ 1891.072231][T11348] ? __x64_sys_umount+0x125/0x160 [ 1891.077279][T11348] ? __cfi___x64_sys_umount+0x10/0x10 [ 1891.082666][T11348] exit_to_user_mode_loop+0x9b/0xb0 [ 1891.087876][T11348] exit_to_user_mode_prepare+0x5a/0xa0 [ 1891.093349][T11348] syscall_exit_to_user_mode+0x1a/0x30 [ 1891.098835][T11348] do_syscall_64+0x58/0xa0 [ 1891.103320][T11348] ? clear_bhb_loop+0x30/0x80 [ 1891.108097][T11348] ? clear_bhb_loop+0x30/0x80 [ 1891.112792][T11348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1891.118757][T11348] RIP: 0033:0x7f531ed902f7 [ 1891.123181][T11348] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1891.142880][T11348] RSP: 002b:00007ffeadef64d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1891.151302][T11348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f531ed902f7 [ 1891.159362][T11348] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeadef6590 [ 1891.167356][T11348] RBP: 00007ffeadef6590 R08: 0000000000000000 R09: 0000000000000000 [ 1891.175504][T11348] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeadef7620 [ 1891.183487][T11348] R13: 00007f531ee11d7d R14: 00000000001cd766 R15: 00007ffeadef7660 [ 1891.191472][T11348] [ 1891.194495][T11348] Modules linked in: [ 1891.198408][T11348] CR2: 0000000000000170 [ 1891.202560][T11348] ---[ end trace 0000000000000000 ]--- [ 1891.208031][T11348] RIP: 0010:ihold+0x26/0x60 [ 1891.212544][T11348] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 1891.232330][T11348] RSP: 0018:ffffc90002687c78 EFLAGS: 00010246 [ 1891.238436][T11348] RAX: ffff888115005100 RBX: 0000000000000000 RCX: ffff888115005100 [ 1891.246517][T11348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1891.254680][T11348] RBP: ffffc90002687c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 1891.262667][T11348] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888117f88fac [ 1891.270646][T11348] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1891.278626][T11348] FS: 0000555564e0f500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1891.287564][T11348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1891.294152][T11348] CR2: 0000000000000170 CR3: 000000012761c000 CR4: 00000000003506a0 [ 1891.302280][T11348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1891.310330][T11348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1891.318404][T11348] Kernel panic - not syncing: Fatal exception [ 1891.324585][T11348] Kernel Offset: disabled [ 1891.328916][T11348] Rebooting in 86400 seconds..