0100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r11, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004680)={0x530, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x80, 0x1, 0x3, {0x2, 0x5, 0x4, 0x5, 0x9, 0xd1cd, 0x800, 0xb0, 0x8000, 0x0, 0x10000, r4, 0xee00, 0x93, 0x4}}, {0x4, 0x0, 0xe, 0x3f, '/dev/ubi_ctrl\x00'}}, {{0x4, 0x3, 0x8, 0x8000000000000001, 0xd0, 0x3ff, {0x6, 0x6, 0x4, 0x5, 0x7, 0xcee, 0x6, 0x3, 0x67509692, 0xc000, 0x8, r5, 0x0, 0x9, 0x4}}, {0x6, 0x6, 0x6, 0x6, '\\-!)$-'}}, {{0x1, 0x2, 0x8, 0xfffffffffffffff8, 0xff, 0x4, {0x1, 0x0, 0x8000, 0x3, 0x5, 0x2, 0x101, 0x3, 0x9, 0x4000, 0x0, r6, r7, 0x1, 0x1164}}, {0x0, 0xfffffffffffffff8, 0xe, 0x4, '/dev/ubi_ctrl\x00'}}, {{0x2, 0x3, 0x6972, 0xffffffff, 0x10000, 0x456396ba, {0x4, 0x1ff, 0xfffffffeffffffff, 0x401, 0x800, 0x2, 0x344, 0x4, 0x69, 0x4000, 0x5, r8, 0x0, 0xbfbf, 0x40}}, {0x6, 0x8, 0xe, 0x83, '/dev/ubi_ctrl\x00'}}, {{0x5, 0x2, 0xffffffff, 0x7, 0x2, 0xffffffde, {0x5, 0xffffffffffffc274, 0x3, 0x5, 0x10001, 0x3ff, 0x57, 0x9, 0x9, 0x2000, 0x2, r9, 0xee00, 0x2, 0x3}}, {0x6, 0x3, 0x10, 0x8, 'memory.pressure\x00'}}, {{0x0, 0x0, 0x1f, 0x1, 0x56, 0x9, {0x1, 0xa90, 0x100000000, 0x0, 0x7, 0x4, 0x6, 0x4, 0x10001, 0xc000, 0x4, r10, 0xffffffffffffffff, 0xffffffff}}, {0x4, 0x7, 0x6, 0x1, '+%^&!%'}}, {{0x2, 0x0, 0x7fff, 0x0, 0x8, 0x7fff, {0x6, 0x54, 0x8, 0xb0a, 0x6, 0x3, 0x6, 0x7ff, 0xc9, 0x6000, 0x3, r11, r12, 0x7ab6, 0x81}}, {0x4, 0xb6, 0x1, 0x8, '}'}}, {{0x2, 0x1, 0x100000000, 0x91, 0x10000, 0x19, {0x3, 0x1, 0x4, 0x401, 0x7, 0x9, 0x7fffffff, 0x5c, 0xfffffff9, 0x8000, 0x71, 0xee01, 0xee01, 0x1, 0x4}}, {0x6, 0x10000, 0x2, 0xa41, '@@'}}]}, 0x530) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:36:16 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:36:16 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) (async) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000040)='./file0\x00', r1, 0xee01) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mknodat$null(r2, &(0x7f00000000c0)='./file0\x00', 0x20, 0x103) (async) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) (async) openat(r2, &(0x7f0000002240)='./file0\x00', 0x282, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = fcntl$getown(r0, 0x9) write$damon_target_ids(r4, &(0x7f0000002180)={@void, [{' ', 0xffffffffffffffff}, {' ', r5}, {}, {}, {}, {' ', r6}, {' ', 0xffffffffffffffff}, {' ', 0xffffffffffffffff}]}, 0xa8) 01:36:16 executing program 2: r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/117, 0x75) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x9579a0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) (async) read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2000) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r9, 0xffffffffffffffff) (async) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r11, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004680)={0x530, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x80, 0x1, 0x3, {0x2, 0x5, 0x4, 0x5, 0x9, 0xd1cd, 0x800, 0xb0, 0x8000, 0x0, 0x10000, r4, 0xee00, 0x93, 0x4}}, {0x4, 0x0, 0xe, 0x3f, '/dev/ubi_ctrl\x00'}}, {{0x4, 0x3, 0x8, 0x8000000000000001, 0xd0, 0x3ff, {0x6, 0x6, 0x4, 0x5, 0x7, 0xcee, 0x6, 0x3, 0x67509692, 0xc000, 0x8, r5, 0x0, 0x9, 0x4}}, {0x6, 0x6, 0x6, 0x6, '\\-!)$-'}}, {{0x1, 0x2, 0x8, 0xfffffffffffffff8, 0xff, 0x4, {0x1, 0x0, 0x8000, 0x3, 0x5, 0x2, 0x101, 0x3, 0x9, 0x4000, 0x0, r6, r7, 0x1, 0x1164}}, {0x0, 0xfffffffffffffff8, 0xe, 0x4, '/dev/ubi_ctrl\x00'}}, {{0x2, 0x3, 0x6972, 0xffffffff, 0x10000, 0x456396ba, {0x4, 0x1ff, 0xfffffffeffffffff, 0x401, 0x800, 0x2, 0x344, 0x4, 0x69, 0x4000, 0x5, r8, 0x0, 0xbfbf, 0x40}}, {0x6, 0x8, 0xe, 0x83, '/dev/ubi_ctrl\x00'}}, {{0x5, 0x2, 0xffffffff, 0x7, 0x2, 0xffffffde, {0x5, 0xffffffffffffc274, 0x3, 0x5, 0x10001, 0x3ff, 0x57, 0x9, 0x9, 0x2000, 0x2, r9, 0xee00, 0x2, 0x3}}, {0x6, 0x3, 0x10, 0x8, 'memory.pressure\x00'}}, {{0x0, 0x0, 0x1f, 0x1, 0x56, 0x9, {0x1, 0xa90, 0x100000000, 0x0, 0x7, 0x4, 0x6, 0x4, 0x10001, 0xc000, 0x4, r10, 0xffffffffffffffff, 0xffffffff}}, {0x4, 0x7, 0x6, 0x1, '+%^&!%'}}, {{0x2, 0x0, 0x7fff, 0x0, 0x8, 0x7fff, {0x6, 0x54, 0x8, 0xb0a, 0x6, 0x3, 0x6, 0x7ff, 0xc9, 0x6000, 0x3, r11, r12, 0x7ab6, 0x81}}, {0x4, 0xb6, 0x1, 0x8, '}'}}, {{0x2, 0x1, 0x100000000, 0x91, 0x10000, 0x19, {0x3, 0x1, 0x4, 0x401, 0x7, 0x9, 0x7fffffff, 0x5c, 0xfffffff9, 0x8000, 0x71, 0xee01, 0xee01, 0x1, 0x4}}, {0x6, 0x10000, 0x2, 0xa41, '@@'}}]}, 0x530) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:36:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(0x0, &(0x7f0000000100)) 01:36:16 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:17 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) 01:36:17 executing program 2: r0 = syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/117, 0x75) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x9579a0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, r1}}, 0x18) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) (async) read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r9, 0xffffffffffffffff) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r11, 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000004680)={0x530, 0x0, 0x0, [{{0x0, 0x0, 0x0, 0x80, 0x1, 0x3, {0x2, 0x5, 0x4, 0x5, 0x9, 0xd1cd, 0x800, 0xb0, 0x8000, 0x0, 0x10000, r4, 0xee00, 0x93, 0x4}}, {0x4, 0x0, 0xe, 0x3f, '/dev/ubi_ctrl\x00'}}, {{0x4, 0x3, 0x8, 0x8000000000000001, 0xd0, 0x3ff, {0x6, 0x6, 0x4, 0x5, 0x7, 0xcee, 0x6, 0x3, 0x67509692, 0xc000, 0x8, r5, 0x0, 0x9, 0x4}}, {0x6, 0x6, 0x6, 0x6, '\\-!)$-'}}, {{0x1, 0x2, 0x8, 0xfffffffffffffff8, 0xff, 0x4, {0x1, 0x0, 0x8000, 0x3, 0x5, 0x2, 0x101, 0x3, 0x9, 0x4000, 0x0, r6, r7, 0x1, 0x1164}}, {0x0, 0xfffffffffffffff8, 0xe, 0x4, '/dev/ubi_ctrl\x00'}}, {{0x2, 0x3, 0x6972, 0xffffffff, 0x10000, 0x456396ba, {0x4, 0x1ff, 0xfffffffeffffffff, 0x401, 0x800, 0x2, 0x344, 0x4, 0x69, 0x4000, 0x5, r8, 0x0, 0xbfbf, 0x40}}, {0x6, 0x8, 0xe, 0x83, '/dev/ubi_ctrl\x00'}}, {{0x5, 0x2, 0xffffffff, 0x7, 0x2, 0xffffffde, {0x5, 0xffffffffffffc274, 0x3, 0x5, 0x10001, 0x3ff, 0x57, 0x9, 0x9, 0x2000, 0x2, r9, 0xee00, 0x2, 0x3}}, {0x6, 0x3, 0x10, 0x8, 'memory.pressure\x00'}}, {{0x0, 0x0, 0x1f, 0x1, 0x56, 0x9, {0x1, 0xa90, 0x100000000, 0x0, 0x7, 0x4, 0x6, 0x4, 0x10001, 0xc000, 0x4, r10, 0xffffffffffffffff, 0xffffffff}}, {0x4, 0x7, 0x6, 0x1, '+%^&!%'}}, {{0x2, 0x0, 0x7fff, 0x0, 0x8, 0x7fff, {0x6, 0x54, 0x8, 0xb0a, 0x6, 0x3, 0x6, 0x7ff, 0xc9, 0x6000, 0x3, r11, r12, 0x7ab6, 0x81}}, {0x4, 0xb6, 0x1, 0x8, '}'}}, {{0x2, 0x1, 0x100000000, 0x91, 0x10000, 0x19, {0x3, 0x1, 0x4, 0x401, 0x7, 0x9, 0x7fffffff, 0x5c, 0xfffffff9, 0x8000, 0x71, 0xee01, 0xee01, 0x1, 0x4}}, {0x6, 0x10000, 0x2, 0xa41, '@@'}}]}, 0x530) (async) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:36:17 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(0x0, &(0x7f0000000100)) 01:36:17 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:17 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) 01:36:17 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x77dd, &(0x7f0000000000)={0x0, 0x66ff, 0x800, 0x3, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10001009}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:17 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) 01:36:17 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) (async) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) 01:36:17 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 01:36:17 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 01:36:17 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r2 = syz_io_uring_setup(0x77dd, &(0x7f0000000000)={0x0, 0x66ff, 0x800, 0x3, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)) (rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10001009}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1717.315796][ T28] kauditd_printk_skb: 41991 callbacks suppressed [ 1717.315814][ T28] audit: type=1400 audit(1697852177.734:2751710): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=20537 comm="syz-executor.0" name="368" dev="sda1" ino=1947 [ 1717.324047][T20539] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1717.348716][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1717.353503][T18553] audit: audit_backlog=66 > audit_backlog_limit=64 01:36:17 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) [ 1717.355305][ T4471] audit: audit_lost=945180 audit_rate_limit=0 audit_backlog_limit=64 [ 1717.361931][T18553] audit: audit_lost=945181 audit_rate_limit=0 audit_backlog_limit=64 [ 1717.369956][ T4471] audit: backlog limit exceeded [ 1717.370070][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1717.370088][ T4482] audit: audit_lost=945182 audit_rate_limit=0 audit_backlog_limit=64 [ 1717.370106][ T4482] audit: backlog limit exceeded 01:36:17 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:17 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 01:36:17 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee01, 0xee01, 0x400) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0xa, 0xa, 0x40000}, 0x20) 01:36:18 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x20) 01:36:18 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 01:36:18 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee01, 0xee01, 0x400) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0xa, 0xa, 0x40000}, 0x20) 01:36:18 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:18 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:18 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 01:36:18 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r2 = syz_io_uring_setup(0x77dd, &(0x7f0000000000)={0x0, 0x66ff, 0x800, 0x3, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10001009}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) syz_io_uring_setup(0x77dd, &(0x7f0000000000)={0x0, 0x66ff, 0x800, 0x3, 0x2ba}, &(0x7f0000000080), &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10001009}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:18 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:18 executing program 3: lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:18 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:18 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xee01, 0xee01, 0x400) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0xa, 0xa, 0x40000}, 0x20) 01:36:18 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) 01:36:19 executing program 3: lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:19 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) 01:36:19 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:19 executing program 3: lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r4, &(0x7f0000002580)={0x20, 0x0, r5}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000022c0)={0x168, 0x0, r5, [{{0x1, 0x2, 0x8, 0x8057, 0x3, 0x400, {0x6, 0x0, 0xfffffffffffffffb, 0x81, 0x200, 0x8, 0xfffffffd, 0x65, 0x7, 0xa000, 0x10000, r6, r1, 0x6, 0x3}}, {0x2, 0x4, 0x15, 0x8, 'ns/time_for_children\x00'}}, {{0x6, 0x1, 0x3, 0x1, 0x5, 0x7, {0x5, 0x1000, 0x5, 0x18, 0xde8f, 0x4, 0x1f, 0x40, 0x8, 0xc000, 0x1, r0, r1, 0x3, 0x5}}, {0x2, 0x3000000000000000, 0xc, 0x385, '/dev/autofs\x00'}}]}, 0x168) syz_open_procfs$namespace(r2, &(0x7f00000021c0)='ns/time_for_children\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '{:'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '-,*-[%+%..*.){#'}], 0xa, "e96c81c0059b610d1b5899aa91be89a6d89f73d76a0e356a2cd1a1d0843b67b6ab263671684fc5aa9f75b2e56a5f10d27ee0e1a80fe5a57cf79ec666ebcaa3b5f9807d1b286fbf2545fad814f96a74917456c17f8cac1df40c44ce7f1032161f42f7ccfb9950bae9a9e2730ed837"}, 0xed) 01:36:19 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:19 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) (async) 01:36:19 executing program 3: mknod(0x0, 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r4, &(0x7f0000002580)={0x20, 0x0, r5}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000022c0)={0x168, 0x0, r5, [{{0x1, 0x2, 0x8, 0x8057, 0x3, 0x400, {0x6, 0x0, 0xfffffffffffffffb, 0x81, 0x200, 0x8, 0xfffffffd, 0x65, 0x7, 0xa000, 0x10000, r6, r1, 0x6, 0x3}}, {0x2, 0x4, 0x15, 0x8, 'ns/time_for_children\x00'}}, {{0x6, 0x1, 0x3, 0x1, 0x5, 0x7, {0x5, 0x1000, 0x5, 0x18, 0xde8f, 0x4, 0x1f, 0x40, 0x8, 0xc000, 0x1, r0, r1, 0x3, 0x5}}, {0x2, 0x3000000000000000, 0xc, 0x385, '/dev/autofs\x00'}}]}, 0x168) (async) syz_open_procfs$namespace(r2, &(0x7f00000021c0)='ns/time_for_children\x00') (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) (async) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '{:'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '-,*-[%+%..*.){#'}], 0xa, "e96c81c0059b610d1b5899aa91be89a6d89f73d76a0e356a2cd1a1d0843b67b6ab263671684fc5aa9f75b2e56a5f10d27ee0e1a80fe5a57cf79ec666ebcaa3b5f9807d1b286fbf2545fad814f96a74917456c17f8cac1df40c44ce7f1032161f42f7ccfb9950bae9a9e2730ed837"}, 0xed) 01:36:19 executing program 3: mknod(0x0, 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:19 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r4, &(0x7f0000002580)={0x20, 0x0, r5}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000022c0)={0x168, 0x0, r5, [{{0x1, 0x2, 0x8, 0x8057, 0x3, 0x400, {0x6, 0x0, 0xfffffffffffffffb, 0x81, 0x200, 0x8, 0xfffffffd, 0x65, 0x7, 0xa000, 0x10000, r6, r1, 0x6, 0x3}}, {0x2, 0x4, 0x15, 0x8, 'ns/time_for_children\x00'}}, {{0x6, 0x1, 0x3, 0x1, 0x5, 0x7, {0x5, 0x1000, 0x5, 0x18, 0xde8f, 0x4, 0x1f, 0x40, 0x8, 0xc000, 0x1, r0, r1, 0x3, 0x5}}, {0x2, 0x3000000000000000, 0xc, 0x385, '/dev/autofs\x00'}}]}, 0x168) syz_open_procfs$namespace(r2, &(0x7f00000021c0)='ns/time_for_children\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '{:'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '-,*-[%+%..*.){#'}], 0xa, "e96c81c0059b610d1b5899aa91be89a6d89f73d76a0e356a2cd1a1d0843b67b6ab263671684fc5aa9f75b2e56a5f10d27ee0e1a80fe5a57cf79ec666ebcaa3b5f9807d1b286fbf2545fad814f96a74917456c17f8cac1df40c44ce7f1032161f42f7ccfb9950bae9a9e2730ed837"}, 0xed) 01:36:19 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x800, 0x103) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='\x00', 0x0, r0) (async) 01:36:19 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:19 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r4, &(0x7f0000002580)={0x20, 0x0, r5}, 0x20) fstat(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f00000022c0)={0x168, 0x0, r5, [{{0x1, 0x2, 0x8, 0x8057, 0x3, 0x400, {0x6, 0x0, 0xfffffffffffffffb, 0x81, 0x200, 0x8, 0xfffffffd, 0x65, 0x7, 0xa000, 0x10000, r6, r1, 0x6, 0x3}}, {0x2, 0x4, 0x15, 0x8, 'ns/time_for_children\x00'}}, {{0x6, 0x1, 0x3, 0x1, 0x5, 0x7, {0x5, 0x1000, 0x5, 0x18, 0xde8f, 0x4, 0x1f, 0x40, 0x8, 0xc000, 0x1, r0, r1, 0x3, 0x5}}, {0x2, 0x3000000000000000, 0xc, 0x385, '/dev/autofs\x00'}}]}, 0x168) (async) syz_open_procfs$namespace(r2, &(0x7f00000021c0)='ns/time_for_children\x00') (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x80082, 0x0) (async) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, 0x0) (async) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '{:'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '/sys/kernel/debug/sync/sw_sync\x00'}, {0x20, '-,*-[%+%..*.){#'}], 0xa, "e96c81c0059b610d1b5899aa91be89a6d89f73d76a0e356a2cd1a1d0843b67b6ab263671684fc5aa9f75b2e56a5f10d27ee0e1a80fe5a57cf79ec666ebcaa3b5f9807d1b286fbf2545fad814f96a74917456c17f8cac1df40c44ce7f1032161f42f7ccfb9950bae9a9e2730ed837"}, 0xed) 01:36:19 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:20 executing program 3: mknod(0x0, 0x400, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:20 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 01:36:20 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8000) 01:36:20 executing program 5: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) [ 1719.688176][T20633] bpf: Bad value for 'mode' 01:36:20 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:20 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 01:36:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:20 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8000) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000000)) (async) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8000) (async) 01:36:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) lstat(0x0, &(0x7f0000000100)) 01:36:20 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 01:36:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:20 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, r0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x8000) 01:36:20 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}, {@fowner_gt}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x35, 0x65, 0x33, 0x61, 0x64, 0x61, 0x64], 0x2d, [0x36, 0x63, 0x33, 0x66], 0x2d, [0x32, 0x63, 0x65, 0x30], 0x2d, [0x61, 0x62, 0x65, 0x54], 0x2d, [0x34, 0x36, 0x37, 0x39, 0x64, 0x33, 0x65, 0x62]}}}, {@uid_gt}]}) 01:36:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 01:36:20 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000010}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:20 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:20 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000010}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000010}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000010}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 01:36:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x10004, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 01:36:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$dsp(r1, &(0x7f0000000000)="70156bfa5bb2542a83c673ad579b1e05e4d84de2", 0x14) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r4, 0x30, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0xa0) 01:36:21 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x3}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$dsp(r1, &(0x7f0000000000)="70156bfa5bb2542a83c673ad579b1e05e4d84de2", 0x14) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r4, 0x30, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0xa0) 01:36:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(0x0, 0x0, 0xffffffffffffffff) 01:36:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (fail_nth: 1) 01:36:22 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 1) 01:36:22 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:22 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$dsp(r1, &(0x7f0000000000)="70156bfa5bb2542a83c673ad579b1e05e4d84de2", 0x14) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r4, 0x30, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0xa0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$dsp(r1, &(0x7f0000000000)="70156bfa5bb2542a83c673ad579b1e05e4d84de2", 0x14) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x0, r4, 0x30, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, 0xa0) (async) 01:36:22 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:22 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (fail_nth: 2) 01:36:22 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) [ 1721.877605][T20715] bpf: Bad value for 'mode' [ 1721.892136][T20717] FAULT_INJECTION: forcing a failure. [ 1721.892136][T20717] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.951121][T20717] CPU: 1 PID: 20717 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1721.961599][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1721.971690][T20717] Call Trace: [ 1721.975014][T20717] [ 1721.977986][T20717] dump_stack_lvl+0x1e7/0x2d0 [ 1721.982706][T20717] ? nf_tcp_handle_invalid+0x650/0x650 [ 1721.988208][T20717] ? panic+0x770/0x770 [ 1721.992303][T20717] ? __might_sleep+0xc0/0xc0 [ 1721.996934][T20717] should_fail_ex+0x3aa/0x4e0 [ 1722.001683][T20717] should_failslab+0x9/0x20 [ 1722.006225][T20717] slab_pre_alloc_hook+0x59/0x310 [ 1722.011277][T20717] ? __mutex_unlock_slowpath+0x21c/0x750 [ 1722.016930][T20717] kmem_cache_alloc+0x52/0x300 [ 1722.021709][T20717] ? getname_flags+0xbc/0x4f0 [ 1722.026490][T20717] ? mutex_unlock+0x10/0x10 [ 1722.031008][T20717] getname_flags+0xbc/0x4f0 [ 1722.035535][T20717] user_path_at_empty+0x2c/0x60 [ 1722.040405][T20717] do_fchownat+0xf0/0x240 [ 1722.044758][T20717] ? print_irqtrace_events+0x220/0x220 [ 1722.050239][T20717] ? chown_common+0x850/0x850 [ 1722.054940][T20717] ? syscall_enter_from_user_mode+0x32/0x230 [ 1722.060979][T20717] ? lockdep_hardirqs_on+0x98/0x140 [ 1722.066207][T20717] __x64_sys_lchown+0x85/0x90 [ 1722.070908][T20717] do_syscall_64+0x41/0xc0 [ 1722.075353][T20717] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1722.081270][T20717] RIP: 0033:0x7fbc05e7cae9 [ 1722.085698][T20717] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1722.105322][T20717] RSP: 002b:00007fbc06b6f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1722.113755][T20717] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7cae9 [ 1722.121738][T20717] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 1722.129721][T20717] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1722.137703][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.145689][T20717] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1722.153688][T20717] 01:36:22 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1722.297233][T20728] FAULT_INJECTION: forcing a failure. [ 1722.297233][T20728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.323710][ T28] kauditd_printk_skb: 35970 callbacks suppressed 01:36:22 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:22 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 2) [ 1722.323726][ T28] audit: type=1400 audit(1697852182.754:2769343): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5048 comm="syz-executor.3" name="syzkaller.ahhHzt" dev="sda1" ino=1939 [ 1722.355905][T18553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.359898][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.362423][T18553] audit: audit_lost=951397 audit_rate_limit=0 audit_backlog_limit=64 [ 1722.362443][T18553] audit: backlog limit exceeded [ 1722.362464][T18553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.377202][T20728] CPU: 1 PID: 20728 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1722.382157][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.388504][T20728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1722.388523][T20728] Call Trace: [ 1722.388533][T20728] [ 1722.388543][T20728] dump_stack_lvl+0x1e7/0x2d0 [ 1722.388589][T20728] ? nf_tcp_handle_invalid+0x650/0x650 [ 1722.388626][T20728] ? panic+0x770/0x770 [ 1722.388655][T20728] ? __lock_acquire+0x7f70/0x7f70 [ 1722.388689][T20728] should_fail_ex+0x3aa/0x4e0 [ 1722.388726][T20728] _copy_from_user+0x2f/0xe0 [ 1722.388755][T20728] memdup_user+0x64/0xc0 [ 1722.388783][T20728] strndup_user+0x68/0xc0 [ 1722.399578][ T4471] audit: audit_lost=951398 audit_rate_limit=0 audit_backlog_limit=64 [ 1722.405671][T20728] __se_sys_mount+0x9f/0x3c0 [ 1722.405707][T20728] ? print_irqtrace_events+0x220/0x220 [ 1722.405738][T20728] ? __x64_sys_mount+0xc0/0xc0 [ 1722.405768][T20728] ? syscall_enter_from_user_mode+0x32/0x230 [ 1722.405798][T20728] ? lockdep_hardirqs_on+0x98/0x140 [ 1722.405826][T20728] ? __x64_sys_mount+0x20/0xc0 [ 1722.405855][T20728] do_syscall_64+0x41/0xc0 [ 1722.405897][T20728] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1722.405933][T20728] RIP: 0033:0x7f8be107cae9 [ 1722.405955][T20728] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1722.405976][T20728] RSP: 002b:00007f8be1ea20c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1722.406003][T20728] RAX: ffffffffffffffda RBX: 00007f8be119bf80 RCX: 00007f8be107cae9 [ 1722.406020][T20728] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1722.406036][T20728] RBP: 00007f8be1ea2120 R08: 0000000020000340 R09: 0000000000000000 [ 1722.406051][T20728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.406065][T20728] R13: 000000000000000b R14: 00007f8be119bf80 R15: 00007ffebcbc4b38 [ 1722.406099][T20728] [ 1722.407707][ T4482] audit: audit_lost=951399 audit_rate_limit=0 audit_backlog_limit=64 01:36:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (fail_nth: 3) [ 1722.417254][ T4471] audit: backlog limit exceeded 01:36:23 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1722.736240][T20737] FAULT_INJECTION: forcing a failure. [ 1722.736240][T20737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.772286][T20737] CPU: 1 PID: 20737 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1722.782753][T20737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1722.792845][T20737] Call Trace: [ 1722.796165][T20737] [ 1722.799130][T20737] dump_stack_lvl+0x1e7/0x2d0 [ 1722.803878][T20737] ? nf_tcp_handle_invalid+0x650/0x650 [ 1722.809397][T20737] ? panic+0x770/0x770 [ 1722.813523][T20737] should_fail_ex+0x3aa/0x4e0 [ 1722.818260][T20737] strncpy_from_user+0x36/0x2e0 [ 1722.823166][T20737] getname_flags+0xf9/0x4f0 [ 1722.827718][T20737] user_path_at_empty+0x2c/0x60 [ 1722.832609][T20737] do_fchownat+0xf0/0x240 [ 1722.836983][T20737] ? print_irqtrace_events+0x220/0x220 [ 1722.842479][T20737] ? chown_common+0x850/0x850 [ 1722.847226][T20737] ? syscall_enter_from_user_mode+0x32/0x230 [ 1722.853250][T20737] ? lockdep_hardirqs_on+0x98/0x140 [ 1722.858500][T20737] __x64_sys_lchown+0x85/0x90 [ 1722.863308][T20737] do_syscall_64+0x41/0xc0 [ 1722.867771][T20737] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1722.873710][T20737] RIP: 0033:0x7fbc05e7cae9 [ 1722.878163][T20737] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1722.897805][T20737] RSP: 002b:00007fbc06b6f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1722.906272][T20737] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7cae9 [ 1722.914287][T20737] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 1722.922317][T20737] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1722.930322][T20737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.938332][T20737] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1722.946442][T20737] [ 1722.974128][T20740] FAULT_INJECTION: forcing a failure. [ 1722.974128][T20740] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.028677][T20740] CPU: 1 PID: 20740 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1723.039148][T20740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1723.049240][T20740] Call Trace: [ 1723.052552][T20740] [ 1723.055599][T20740] dump_stack_lvl+0x1e7/0x2d0 [ 1723.060314][T20740] ? nf_tcp_handle_invalid+0x650/0x650 [ 1723.065796][T20740] ? panic+0x770/0x770 [ 1723.069882][T20740] ? __might_sleep+0xc0/0xc0 [ 1723.074499][T20740] should_fail_ex+0x3aa/0x4e0 [ 1723.079198][T20740] should_failslab+0x9/0x20 [ 1723.083720][T20740] slab_pre_alloc_hook+0x59/0x310 [ 1723.088764][T20740] ? __se_sys_mount+0x15a/0x3c0 [ 1723.093627][T20740] __kmem_cache_alloc_node+0x4b/0x270 [ 1723.099014][T20740] ? __se_sys_mount+0x15a/0x3c0 [ 1723.103880][T20740] kmalloc_trace+0x2a/0xe0 [ 1723.108314][T20740] __se_sys_mount+0x15a/0x3c0 [ 1723.113012][T20740] ? print_irqtrace_events+0x220/0x220 [ 1723.118501][T20740] ? __x64_sys_mount+0xc0/0xc0 [ 1723.123324][T20740] ? syscall_enter_from_user_mode+0x32/0x230 [ 1723.129341][T20740] ? lockdep_hardirqs_on+0x98/0x140 [ 1723.134573][T20740] ? __x64_sys_mount+0x20/0xc0 [ 1723.139372][T20740] do_syscall_64+0x41/0xc0 [ 1723.143812][T20740] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1723.149749][T20740] RIP: 0033:0x7f8be107cae9 [ 1723.154189][T20740] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 01:36:23 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:23 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) [ 1723.173815][T20740] RSP: 002b:00007f8be1e810c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1723.182245][T20740] RAX: ffffffffffffffda RBX: 00007f8be119c050 RCX: 00007f8be107cae9 [ 1723.190234][T20740] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 1723.198222][T20740] RBP: 00007f8be1e81120 R08: 0000000020000340 R09: 0000000000000000 [ 1723.206212][T20740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.214208][T20740] R13: 000000000000006e R14: 00007f8be119c050 R15: 00007ffebcbc4b38 [ 1723.222302][T20740] 01:36:23 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:23 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (fail_nth: 4) 01:36:23 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x9}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:23 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:23 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 3) 01:36:23 executing program 2: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', '.'}, {' ', './file0'}], 0x7) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1723.555679][T20755] FAULT_INJECTION: forcing a failure. [ 1723.555679][T20755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1723.612569][T20755] CPU: 0 PID: 20755 Comm: syz-executor.0 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1723.623059][T20755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1723.633150][T20755] Call Trace: [ 1723.636457][T20755] [ 1723.639429][T20755] dump_stack_lvl+0x1e7/0x2d0 [ 1723.644161][T20755] ? nf_tcp_handle_invalid+0x650/0x650 [ 1723.649675][T20755] ? panic+0x770/0x770 [ 1723.653790][T20755] ? __lock_acquire+0x7f70/0x7f70 [ 1723.658864][T20755] should_fail_ex+0x3aa/0x4e0 [ 1723.663593][T20755] _copy_from_user+0x2f/0xe0 [ 1723.668226][T20755] __se_sys_mount+0x17d/0x3c0 [ 1723.672947][T20755] ? print_irqtrace_events+0x220/0x220 [ 1723.678460][T20755] ? __x64_sys_mount+0xc0/0xc0 [ 1723.683273][T20755] ? syscall_enter_from_user_mode+0x32/0x230 [ 1723.689314][T20755] ? lockdep_hardirqs_on+0x98/0x140 [ 1723.694558][T20755] ? __x64_sys_mount+0x20/0xc0 [ 1723.699369][T20755] do_syscall_64+0x41/0xc0 [ 1723.703924][T20755] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1723.709872][T20755] RIP: 0033:0x7f8be107cae9 [ 1723.714334][T20755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1723.733980][T20755] RSP: 002b:00007f8be1ea20c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1723.742429][T20755] RAX: ffffffffffffffda RBX: 00007f8be119bf80 RCX: 00007f8be107cae9 [ 1723.750435][T20755] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 01:36:24 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) [ 1723.758442][T20755] RBP: 00007f8be1ea2120 R08: 0000000020000340 R09: 0000000000000000 [ 1723.766450][T20755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.774459][T20755] R13: 000000000000000b R14: 00007f8be119bf80 R15: 00007ffebcbc4b38 [ 1723.782485][T20755] 01:36:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 4) 01:36:24 executing program 2: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', '.'}, {' ', './file0'}], 0x7) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:24 executing program 5: mknod(0x0, 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 5) 01:36:24 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 6) [ 1724.148670][T20778] bpf: Bad value for 'mode' 01:36:24 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:24 executing program 2: write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', '.'}, {' ', './file0'}], 0x7) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:24 executing program 5: mknod(0x0, 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 7) 01:36:24 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:24 executing program 5: mknod(0x0, 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:24 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x84) 01:36:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 8) 01:36:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10}, 0x18) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x84) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10}, 0x18) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x84) (async) 01:36:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:25 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:25 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 9) 01:36:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x12, 0x10}, 0x18) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200000, 0x84) 01:36:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:25 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000406c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d35faba900d2fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000416c0)={0x6e80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "3ac2d9ef23d198"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000426c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000428c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "3dabd3a46f2cb7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000438c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "930fa6eac0b43f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044ac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "39db6b6d552475"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7907fb1583d698"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000470c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "08db94b85cb7e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000480c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "8ab64af89696dc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000490c0)={{0x0, 0xfffffffffffffff7, 0x5, 0x1, 0xe5c, 0x1, 0x1, 0x4, 0x2, 0x100, 0x100, 0x0, 0x1, 0x8001, 0x80000001}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049180)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "a14f19e2b65ac3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "16f3fe1735089e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "f6cd940c8f7077"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "33a9bd8a0cea10"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d380)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "13ebe96f62afda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e580)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "e65f50e3a091b0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f780)={0xffffffffffffff80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "18cb0e9d21a750"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000050780)={{0x0, 0xff, 0x7, 0x900000, 0x8, 0x200, 0x0, 0xff, 0x0, 0xe48f, 0x80000001, 0xc, 0xb34, 0x5, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050800)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051a00)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {0x0, r1}, {}, {0x0, r2}, {}, {r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {0x0, r7}, {}, {0x0, r8}, {}, {}, {r9}, {0x0, r10}, {}, {}, {r11, r12}, {}, {r13}, {}, {r14}, {0x0, r15}, {}, {r16}, {0x0, r17}, {}, {}, {}, {0x0, r18}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {r22, r23}, {r24}, {}, {}, {r25}], 0x7b, "1170f25759e114"}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1725.041641][T20809] FAULT_INJECTION: forcing a failure. [ 1725.041641][T20809] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.111212][T20809] CPU: 0 PID: 20809 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1725.121695][T20809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1725.131792][T20809] Call Trace: [ 1725.135108][T20809] [ 1725.138084][T20809] dump_stack_lvl+0x1e7/0x2d0 [ 1725.142839][T20809] ? nf_tcp_handle_invalid+0x650/0x650 [ 1725.148360][T20809] ? panic+0x770/0x770 [ 1725.152484][T20809] ? __might_sleep+0xc0/0xc0 [ 1725.157208][T20809] ? register_lock_class+0x104/0x990 [ 1725.162544][T20809] should_fail_ex+0x3aa/0x4e0 [ 1725.167282][T20809] should_failslab+0x9/0x20 [ 1725.171828][T20809] slab_pre_alloc_hook+0x59/0x310 [ 1725.176902][T20809] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1725.182678][T20809] __kmem_cache_alloc_node+0x4b/0x270 [ 1725.188111][T20809] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1725.193889][T20809] __kmalloc+0xa8/0x230 [ 1725.198094][T20809] ? rcu_is_watching+0x15/0xb0 [ 1725.203010][T20809] tomoyo_realpath_from_path+0xcf/0x5e0 01:36:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x1020, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1725.208638][T20809] tomoyo_path_number_perm+0x23a/0x870 [ 1725.214183][T20809] ? tomoyo_path_number_perm+0x208/0x870 [ 1725.219880][T20809] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1725.225392][T20809] ? stack_trace_save+0x117/0x1c0 [ 1725.230477][T20809] ? verify_lock_unused+0x140/0x140 [ 1725.235748][T20809] ? make_kuid+0x700/0x700 [ 1725.240241][T20809] ? __down_write_common+0x161/0x200 [ 1725.245572][T20809] ? in_group_p+0x83/0x1e0 [ 1725.250034][T20809] tomoyo_path_chown+0x42/0xb0 [ 1725.254864][T20809] security_path_chown+0xdd/0x130 [ 1725.259946][T20809] chown_common+0x4b2/0x850 [ 1725.264516][T20809] ? __ia32_sys_chmod+0x1a0/0x1a0 [ 1725.269593][T20809] ? rcu_read_lock_any_held+0xb7/0x160 [ 1725.275113][T20809] ? __mnt_want_write+0x226/0x2a0 [ 1725.280204][T20809] do_fchownat+0x16d/0x240 [ 1725.284677][T20809] ? chown_common+0x850/0x850 [ 1725.289497][T20809] ? syscall_enter_from_user_mode+0x32/0x230 [ 1725.295525][T20809] ? lockdep_hardirqs_on+0x98/0x140 [ 1725.300773][T20809] __x64_sys_lchown+0x85/0x90 [ 1725.305503][T20809] do_syscall_64+0x41/0xc0 01:36:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1725.309978][T20809] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1725.315938][T20809] RIP: 0033:0x7fbc05e7cae9 [ 1725.320397][T20809] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1725.340053][T20809] RSP: 002b:00007fbc06b6f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1725.348510][T20809] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7cae9 01:36:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) [ 1725.356519][T20809] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 1725.364528][T20809] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1725.372705][T20809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.380708][T20809] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1725.388733][T20809] 01:36:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"764e8d60e2d3e816cbe84e28faaec4dd", 0x0, r2, {0x4, 0x9f3}, {0xfb, 0xe7}, 0xec10, [0x3, 0xabb, 0x401, 0x43682283, 0xc, 0x2, 0x0, 0x91, 0x8, 0x1, 0x5, 0x6d6616c0, 0x100000001, 0x9, 0x0, 0x4b]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:25 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x1}}, {}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:25 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"764e8d60e2d3e816cbe84e28faaec4dd", 0x0, r2, {0x4, 0x9f3}, {0xfb, 0xe7}, 0xec10, [0x3, 0xabb, 0x401, 0x43682283, 0xc, 0x2, 0x0, 0x91, 0x8, 0x1, 0x5, 0x6d6616c0, 0x100000001, 0x9, 0x0, 0x4b]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000406c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d35faba900d2fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000416c0)={0x6e80, [], 0x7, "3ac2d9ef23d198"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000416c0)={0x6e80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "3ac2d9ef23d198"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000426c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000428c0)={0x8, [], 0x2, "3dabd3a46f2cb7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000428c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "3dabd3a46f2cb7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000438c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "930fa6eac0b43f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044ac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "39db6b6d552475"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x8, [], 0x0, "7907fb1583d698"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7907fb1583d698"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046ec0)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000470c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "08db94b85cb7e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000480c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "8ab64af89696dc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000490c0)={{0x0, 0xfffffffffffffff7, 0x5, 0x1, 0xe5c, 0x1, 0x1, 0x4, 0x2, 0x100, 0x100, 0x0, 0x1, 0x8001, 0x80000001}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049180)={0x4, [], 0x8, "a14f19e2b65ac3"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049180)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "a14f19e2b65ac3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "16f3fe1735089e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "f6cd940c8f7077"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "33a9bd8a0cea10"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d380)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "13ebe96f62afda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e380)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e580)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "e65f50e3a091b0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f780)={0xffffffffffffff80, [], 0x8, "18cb0e9d21a750"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f780)={0xffffffffffffff80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "18cb0e9d21a750"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000050780)={{0x0, 0xff, 0x7, 0x900000, 0x8, 0x200, 0x0, 0xff, 0x0, 0xe48f, 0x80000001, 0xc, 0xb34, 0x5, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050800)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050800)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051a00)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {0x0, r1}, {}, {0x0, r2}, {}, {r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {0x0, r7}, {}, {0x0, r8}, {}, {}, {r9}, {0x0, r10}, {}, {}, {r11, r12}, {}, {r13}, {}, {r14}, {0x0, r15}, {}, {r16}, {0x0, r17}, {}, {}, {}, {0x0, r18}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {r22, r23}, {r24}, {}, {}, {r25}], 0x7b, "1170f25759e114"}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1725.751934][T20809] ERROR: Out of memory at tomoyo_realpath_from_path. 01:36:26 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 10) 01:36:26 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2010, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(0x0, 0x142, 0x60) 01:36:26 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000003c0)) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"764e8d60e2d3e816cbe84e28faaec4dd", 0x0, r2, {0x4, 0x9f3}, {0xfb, 0xe7}, 0xec10, [0x3, 0xabb, 0x401, 0x43682283, 0xc, 0x2, 0x0, 0x91, 0x8, 0x1, 0x5, 0x6d6616c0, 0x100000001, 0x9, 0x0, 0x4b]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:26 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000406c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d35faba900d2fb"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000416c0)={0x6e80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "3ac2d9ef23d198"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000426c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000428c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "3dabd3a46f2cb7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000438c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "930fa6eac0b43f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044ac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "39db6b6d552475"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045cc0)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7907fb1583d698"}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046ec0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000470c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "08db94b85cb7e2"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000480c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "8ab64af89696dc"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000490c0)={{0x0, 0xfffffffffffffff7, 0x5, 0x1, 0xe5c, 0x1, 0x1, 0x4, 0x2, 0x100, 0x100, 0x0, 0x1, 0x8001, 0x80000001}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049180)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "a14f19e2b65ac3"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "16f3fe1735089e"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "f6cd940c8f7077"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c180)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "33a9bd8a0cea10"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d380)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "13ebe96f62afda"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e580)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "e65f50e3a091b0"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f580)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f780)={0xffffffffffffff80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "18cb0e9d21a750"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000050780)={{0x0, 0xff, 0x7, 0x900000, 0x8, 0x200, 0x0, 0xff, 0x0, 0xe48f, 0x80000001, 0xc, 0xb34, 0x5, 0x2}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050800)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051a00)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {0x0, r1}, {}, {0x0, r2}, {}, {r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {0x0, r7}, {}, {0x0, r8}, {}, {}, {r9}, {0x0, r10}, {}, {}, {r11, r12}, {}, {r13}, {}, {r14}, {0x0, r15}, {}, {r16}, {0x0, r17}, {}, {}, {}, {0x0, r18}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {r22, r23}, {r24}, {}, {}, {r25}], 0x7b, "1170f25759e114"}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:26 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(0x0, 0x142, 0x60) 01:36:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, ']'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {}, {0x20, 'memory.pressure\x00'}, {0x20, ')./+$+:)\']\xfd,'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {0x20, 'memory.pressure\x00'}], 0xa, "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"}, 0x109e) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x64) write$FUSE_INTERRUPT(r4, &(0x7f0000000100)={0x10}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) write$smackfs_label(r3, 0x0, 0x0) fstat(r2, &(0x7f0000000040)) 01:36:26 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e00, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1726.091976][T20851] FAULT_INJECTION: forcing a failure. [ 1726.091976][T20851] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.146103][T20852] bpf: Bad value for 'mode' [ 1726.153773][T20851] CPU: 0 PID: 20851 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1726.164237][T20851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1726.174332][T20851] Call Trace: [ 1726.177741][T20851] [ 1726.180708][T20851] dump_stack_lvl+0x1e7/0x2d0 [ 1726.185440][T20851] ? nf_tcp_handle_invalid+0x650/0x650 [ 1726.190959][T20851] ? panic+0x770/0x770 01:36:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(0x0, 0x142, 0x60) [ 1726.195083][T20851] ? __might_sleep+0xc0/0xc0 [ 1726.199721][T20851] ? copy_from_kernel_nofault_allowed+0x79/0xe0 [ 1726.206115][T20851] should_fail_ex+0x3aa/0x4e0 [ 1726.211027][T20851] should_failslab+0x9/0x20 [ 1726.215589][T20851] slab_pre_alloc_hook+0x59/0x310 [ 1726.220659][T20851] ? prepend_path+0x2f/0xbe0 [ 1726.225306][T20851] ? tomoyo_encode+0x26f/0x530 [ 1726.230129][T20851] __kmem_cache_alloc_node+0x4b/0x270 [ 1726.235546][T20851] ? d_absolute_path+0x1c6/0x300 [ 1726.240541][T20851] ? tomoyo_encode+0x26f/0x530 01:36:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1726.245359][T20851] __kmalloc+0xa8/0x230 [ 1726.249573][T20851] tomoyo_encode+0x26f/0x530 [ 1726.254226][T20851] tomoyo_realpath_from_path+0x598/0x5e0 [ 1726.259927][T20851] tomoyo_path_number_perm+0x23a/0x870 [ 1726.265440][T20851] ? tomoyo_path_number_perm+0x208/0x870 [ 1726.271125][T20851] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1726.276723][T20851] ? stack_trace_save+0x117/0x1c0 [ 1726.281805][T20851] ? verify_lock_unused+0x140/0x140 [ 1726.287086][T20851] ? make_kuid+0x700/0x700 [ 1726.291555][T20851] ? __down_write_common+0x161/0x200 [ 1726.296889][T20851] ? in_group_p+0x83/0x1e0 [ 1726.301355][T20851] tomoyo_path_chown+0x42/0xb0 [ 1726.306205][T20851] security_path_chown+0xdd/0x130 [ 1726.311287][T20851] chown_common+0x4b2/0x850 [ 1726.315857][T20851] ? __ia32_sys_chmod+0x1a0/0x1a0 [ 1726.320935][T20851] ? rcu_read_lock_any_held+0xb7/0x160 [ 1726.326452][T20851] ? __mnt_want_write+0x226/0x2a0 [ 1726.331534][T20851] do_fchownat+0x16d/0x240 [ 1726.336003][T20851] ? chown_common+0x850/0x850 [ 1726.340736][T20851] ? syscall_enter_from_user_mode+0x32/0x230 [ 1726.346761][T20851] ? lockdep_hardirqs_on+0x98/0x140 [ 1726.352008][T20851] __x64_sys_lchown+0x85/0x90 [ 1726.356733][T20851] do_syscall_64+0x41/0xc0 [ 1726.361214][T20851] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1726.367163][T20851] RIP: 0033:0x7fbc05e7cae9 [ 1726.371626][T20851] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1726.391264][T20851] RSP: 002b:00007fbc06b6f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1726.399721][T20851] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7cae9 [ 1726.407730][T20851] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 1726.415754][T20851] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1726.423762][T20851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.431767][T20851] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1726.439793][T20851] 01:36:26 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 11) 01:36:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file0\x00', r0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:26 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, ']'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {}, {0x20, 'memory.pressure\x00'}, {0x20, ')./+$+:)\']\xfd,'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {0x20, 'memory.pressure\x00'}], 0xa, "cce1c82f88a4e76e1d84f3dffa82c556bed1777b86a973f48438372832c4f70a4cf6526fee3a559fb14d59d644dce372dc9d710e5e5a3d63c670213a09e54bcd674f0056154187fffc9c1f0312b6ac3318e006148f148ef7be19f05c1691a1cf7d99396808447091b85c8e5655c502b89285ca0ee0e2c33f11fd1591bc3701972699618f749a11b5bd565d5c3b434e273b4af4e774b195a0d97459a86f20422b5bb42f016705c13868ce4747b43b40b4226fdd9e5a4b6b7e7369f0c24b29cb2ac261a20700328e212c17047faa11b739670468c80f831db25cba0242624d831c756a41327904fcb661bf098a7fefa43851e4b9f3f818f0409ddbf887bc96091667f9e11c3459a8c570154782768cb79424809560cd5966de153bfb2ef59ff3bb0e0c8996904577b4db8393a59595841f881a82af6264054926c914c0129d23870e41666bdc961c5c46a71cbeae13fafcf8b236eab7f7ab55f08fec04ba699c890c4ee26f16406bffabe3acaa780bcf696df29dbf1ba25ba61f2ab10db89465b591b8deb760fd55425dfd6337cca72863afeb848aaf8b1008ed5993d46be0e1137bec048fe0d6925d39b96d2b920b69393be49836881e621d362e042e50a9023876703ead2caf81ecfe45bb2903107a6ef9ec4eb1b0f448536a147247945d7fbc9ff8228bbfe05764c346295ce205f3a48c5a1f5f4c753839a68b73a9b0ad504b43a30c3d3e6dbc7264d90096daa7452821f6303c9530a7476a25196ee84f5fd29a2eb878a059f6a1a95ab32d0cc91192c7e1388b09423ba75dfd7309510a69286dd387af0f32d25becc27cda7cf354207547a645b9a9ee23cd2c9a09ce89f7c7dec0e1bf8f9e66c9dae36fe78780bf5a5a84ca68198934f038e30cde6e6f161b60bf628cfa71410cf37800f6e99c07415203c63c129e601cb37e376d1c177590b3b04299cb368b0ca40d5da58a1814f9f3810193a36ece50762a1684bc33dbe7d2754da07af9af1b7ac4845af3536194bd407e1e8ff0ee93ea13d7786104a7a0075a7bc24cc2aa06a9c870ae8ae385bb0693e0963d548031d91def997d25314f59bc5c86650eaea007eed328e5f16272ba21426789aaeb30db549b4bc0a6d20789c4fd306e2452d45f6fa5c47f9f89c6d702f6c7fcbd0b535bab9d157a90e586fc0814b28f06f89c676688f3f8f643ba0c26c780c700737036e44a39718609bc1a5663db9f616f5e3814af1095851d1b477321af18f57d7b04d61164867a3cce66e41a5aae913d1073cb89a173f38f9e36e26fc4f000ba68d6073913940d231583b96ea3d32efaa7c4d03de58017136d42ea9af991778c7b9b9112180e27a22047d6f117d30f6e7a3423d58f8f8c9d48d970356942d59fcf452cd23dee5808f34c9bf8df1ce5334b904d4ba3208968578c8ce42b4e5ccb98603c9cdc8f6bf600a70a23c06dcfb2baeb464881a5e65e6d34f1f3e5a5c82be4ce0c1c23d1e729d9e2f9ce6f160a96e975977e9f5c3a14cbf3d775ae25b777bde8d2b63921ff5c28bff98eb5a85322cf998508801b6e3472e11b686027c7409f28da0f38a14841865e196405ed8372d749367a25e1b6ae2bb34a93f90c47a9da8452839860f458b84900ecc2080f9627d6b7031e2e980c03af9f70249de9389a0de7d4dbacdd1bfc71be917ef7c25ba62a53e1b607e82d995d2aff284cc152c7d45ed90b6f77dff12e24a92998f740675f0b789a98ce82fda5123f0ba10800a65e400144ffa6a7fd073cfc30da84e293484622bbd9f59a5bf613d80a7d7d02e6cac8bb68ba951a1b07cf26b062d9696fa6bde227f5a365ea81a89dc72f3b1f29e501cb05b480ce31e382926dde54e3a6a953671077337be61a61175d5f049e81fd4d10e0a303db1c266f9ac171d0bd21855980411da7bb62bc9f8fcb0a2985fbec881f86a54dbe8e2f3da2cd6fd567478efb02f42a03bbfca8a080edb0d8b34e2ce4823acbb3bd38efb17b021e5e1b094929160338e9bb2fbb3fc8e87f1463f2d373cd7dae131f090bc451ff2a95869f0195daccd2ef982823383e597f6a32928b758d523c11a548efc0069f8abb208adb836f6f918d9326654fd3c21f1672453d716fff14d59de8e1bf6ced9cde187471e7e175378e44dee07600ec3095ecb99a815ab6c9fd0b1e1564b6ab397724c6b707ad3c7fce025d06a1c8b727ef550401b9d5f14f97c4adc073c071d69db5544cba905b9152c8a7a118ecd5437e2428d27b9056697f27c8821240334392502ecf49f1306a0b5a68a90a9ae81e3c681e5d22360fac13a7626cdf60fc9abce370423509c46d04baf37f222347959bba3654aa1ed4db54dc9ef5760f96f847c229e5aa83de75e07fb10f655fa0ba961c04dbff63380294127b2949f5713ca1e3fc78dcf3e9ece3860024732579c76a35ae7a10ce7b151376f641873e2cddf1427bc9059a6e09ea3d589383ba12e63396a4dd5e1ccf64ea45dc275111dcd2b63d48fd40909d9721d84d8851e409d6d479265b46c38d52528bb69d72f5f8af8c3c170d7c37629ff6966849148d036c8b3ef82591131db45fc03181b0cb61af6856b50f79536ec0d19469bfff7e6179d74414944dfe8f01394fd0e49d48c75926116c6ff4376a4c03db1ddb5a1dbeb145791af68ab1abc584276137cfbbfcc287ac0fdb404a2bb311fd290b0aa69038bae5c8720d3abe453b359e751290029c78416489bcba9508573bf6000dd46f9b96c8c076f68a27e251fca520aa27d17077b7a15e5c4080dfbdf6ce1ab815ff9ac19dcf8597629837aa72b53ec641944f2fb2c3a97d05f97fd1101e96c175ef05903f6e604b406522c6222c090e85d871023ddfcef46254b91f1a001cf03a91f035a810bbcbbe3fb1b62ae411d9510f9f5c737abc3512957dea7aafefdccb7462e11ec78c9acf7373443f86294fb317bf8d161a7c9400a4aa478525805572ea7721ae93277f7868435dba76292bec1a40924bb5fc75c2351e46183047e489795c45dfaceec9ab00675822f08292055635d50c3121a4c7317ac8e12e030087e2ec188cadc8b13199c278bfbe9ccc7c7d2eee0e31830269cc100de3d6b761e7d380c0a113df1a1223152f1fbd0940411701ecc597096726f4333cbaa5b0bb92450dd99615c3956ced94872063ae7ab5b0bb7d32df058f5ccf9df29df2d7610ed62f0a65076ec852e14e5c700695a6586e36c8ba2518e42ab645a277329269af3f6e8d0718df322c64e8cb9a434a12617633d43221ecafb5ab2238b74f5736531979d50aee8b8bb128a9f3e1bc372d08a966a45de7cd2609d85eb19cd209e3629a4b5532f4799864648fef24ad77923244a0b46aacd4b71d10891baa42c80d35c2eeb9b8a6fbbf031588a9fcb5a23ddd3905985ced29252b4af7fec06b050f9572e274cd31c234c17b903afa63decf61364b42ce9b261b1ff16a57e17ebd1a2df6547202a37e81926a0560dec773002840fa922d100717845e27f14dfb1726fff25d7b06bc22bb13ec795a9ef2756bb855ccb9e871550dc01fff92b02c6e540aed6ba146a4ec3f4da10bd29013046763aa4f706eefc4295d5a38895270136915f305ff88311ba30c0c07424798dcb93a20b7252f66741fb30c22df9ab5fc5f11fb38d0a4b7b84f48ec5595edf61699cba2492c99b46b908430f9ba11787eac1d0d39a612be320d8b2c9e81dda6e08fbbd49c883400e8dbec1d84a9f0419db124237a49c5267793f6cfc7b400bb1c1a1cd51f623475db0e5581000358eb916eb23f1b235fe987f8999f8e3684eabbb82655fff98e4ac6c2d96cc216607ab950bad958f9d5f51b9f83634e24cd0ba9aa356e889f28fe1841b7b1b11e9025acfd798586d93f1bd9b317ecb64ae2cf8d1c7d34c769ac2860e9ec8eb55a88a2f2fc4ea46d5866b12386a78397be504cf8ead239db79d2c9a7560b5eaeeea94775eb3be46bf0834e09d64d738a58465cb1558117e0ca97929942983f49c2e8f8546ffe48fa4d3af2fbe00d479343424830b110cd796ab0a946141ee5dff387c558246ffaacaf34077cbd72d28c6ac0a71ed61b54d5f4cc2ba35dc3d1ce16b4700f90ce2a62a4a013331440d5e81fed3b53ff2857f7ac6ab1d52d3e19077e0357f26f3396aa2a50c0008d37fe74e1bf8f19991718e4790b2c0f91d0f7502b088dcd1e5271ab31ed07e22b27695be7c4d80deb955b8ec3a5aaac39b00d7ff8679518df6d2427414524bd1c573f5baed3336289377f1ee3c7684105fd0fea77b6e7df238e60a8959a6f5d22647dc9afbe677254339ae63cf48dcc427811da793c0e6726e026abdd1c514b3ac011bf8db61d479e2b357799018b658d357565d7535e83b047de92e686b94dac2e119ae7b45d640dc5cb02e3bf8f00bb000dda4370b19d3b9f7b6ec00f9de994b62ab86f068b2dbccfbf6b1a9ef831da18ab5cdfdad41033ca20535e25e7cfaf69cb1316af90294ab0864f910a1533e62163b483d4e99a65fa60289c6323001e1a94aef5741af0bd117cc343debc5084bd31b986593d3c37a751bef7373e3a9bbd6f792ed1e91c89f2effadf32d5e3cf48ab124c28628a310e0fa453e91d3da30877c17fb483af35b48d865cb62132139d5742b49a65a115c952a37dcc4f60daa48b456e61719f05788e5937df6131378e27942a2a77b72c2e8c93bc31102d50a6c636a885e6b99c9469c5d3dc359302eb722f4fb2621bc123b20fb6b4db3f7d79ecbf47a7e07a00e40f473f0fe7a33a3ae46c238aa75ab3b133236994e216a73f98cc2a90699b6f747bf54089b6f3f5f3651861b77b7669a03bb0ef69a7cf7e4da203a23b8b29924baaebeaf0be2a67eeb28dfc0e03002893aad48a8305f6412eb4a7f7cb049bab3274cbd845aa381f03f98735bbcd3f60b8bd2bf84b5b79c3574a9b792d7714578b7d458b23db9bfe6c8b862d9ee07aebb454939af365ea23a531caff877c61b28906bc0f04bf4b7bbc0ff6c5d7a6f2e3cc5fb7d71cb6ae691212380244b3ffb92dadcbaeaadbe031d2f4b74efc2f8ff27723bf463ec28c59a0ea0e580237634d87bc4f3966de49dd5e25bf9d3e9ec626c0bcaa0bf79a52ea424620038315eb52404195d61ef5e03c8c6463752e860409608da5e2ae6c0908b804932b8afcfc8e4d986f18f761258eb91a120939f7907c961f591292d5f1b306b2f2ce7efe19a29e17d4b17bce3504f3b37a5701bf3b7170dd9172a43e6b5979899a42597310c5f3958d931a84c1f74f08f817a8693f3a26a134da752f3fee49bb698ec1e8890e2023d8caf17c35926eb329754d3eabde78dedc6a72f28b04c980a235bec82b2a7203e59eb0274c0b8659b49fe922e15c13b1a2203205dd650f6a056be0c86404608fa296936d3b6c9acb99913f80eaa60aeca503ece4769ea14b22883819b982e27103f11b2192d504b33637ba8d68715d2c0f3857a381515420a57421eed37ab34719612d2aadf04185faba68242ab5a4e3bf61257fd084c8d2d3c5e7ce8c7c98bac58444e0a3972f4c2ebda241292a1ae155a02824b2cb55efc297f0f29425e55cf2354725d8dc263602a43199c03d54aece898dba4baff0b3fa22387bbf2080b81da0594879a63de6ac25eab326c2f917ff2276312b01901b33888143d8b4b51be1be9168243253621d200a3751294ad0124171c0fa83357256650177d0f78963c9cd299d5a79b7577cb039bff0bed5468e69a4a7697ac02d5180a384cd14d0de89e8ca6b24e05e96a0c0381f281cc28c88edf20d3093b63644c70953"}, 0x109e) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x64) (rerun: 64) write$FUSE_INTERRUPT(r4, &(0x7f0000000100)={0x10}, 0x10) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) write$smackfs_label(r3, 0x0, 0x0) fstat(r2, &(0x7f0000000040)) 01:36:26 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xedc0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1726.478560][T20851] ERROR: Out of memory at tomoyo_realpath_from_path. 01:36:27 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [{}, {0x20, ']'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {}, {0x20, 'memory.pressure\x00'}, {0x20, ')./+$+:)\']\xfd,'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'blkio.throttle.write_bps_device\x00'}, {0x20, 'memory.pressure\x00'}], 0xa, "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"}, 0x109e) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x4000, 0x64) write$FUSE_INTERRUPT(r4, &(0x7f0000000100)={0x10}, 0x10) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) write$smackfs_label(r3, 0x0, 0x0) (async) fstat(r2, &(0x7f0000000040)) 01:36:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x802000, &(0x7f00000001c0)={'trans=xen,', {[{@version_L}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '{'}}], [{@fowner_gt={'fowner>', r0}}, {@obj_user={'obj_user', 0x3d, ':'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '}^)\\*/}:^(^-]\\#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':!+'}}]}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 12) 01:36:27 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:27 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 13) 01:36:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x802000, &(0x7f00000001c0)={'trans=xen,', {[{@version_L}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '{'}}], [{@fowner_gt={'fowner>', r0}}, {@obj_user={'obj_user', 0x3d, ':'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '}^)\\*/}:^(^-]\\#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':!+'}}]}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:27 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 14) 01:36:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x802000, &(0x7f00000001c0)={'trans=xen,', {[{@version_L}, {@cache_loose}, {@cachetag={'cachetag', 0x3d, '{'}}], [{@fowner_gt={'fowner>', r0}}, {@obj_user={'obj_user', 0x3d, ':'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '}^)\\*/}:^(^-]\\#'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':!+'}}]}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1727.333192][ T28] kauditd_printk_skb: 42523 callbacks suppressed [ 1727.333211][ T28] audit: type=1400 audit(1697852187.754:2783878): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="virtual" dev="sysfs" ino=1308 [ 1727.337722][T20909] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1727.345730][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1727.359574][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 01:36:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20100000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1727.365249][ T4471] audit: audit_lost=960796 audit_rate_limit=0 audit_backlog_limit=64 [ 1727.365270][ T4471] audit: backlog limit exceeded [ 1727.365471][ T5048] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1727.382007][T15005] audit: audit_backlog=67 > audit_backlog_limit=64 [ 1727.398731][ T28] audit: type=1400 audit(1697852187.754:2783879): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="block" dev="sysfs" ino=12802 [ 1727.411549][T20910] audit: audit_backlog=66 > audit_backlog_limit=64 01:36:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc040, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:27 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:28 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="0080000000000000010000009753d1fad1357d42f2e2428719466bca586a68b2aaab1666540ec1463870979acc47b2488dccc9363a3e87e6cf8bd5285ca21790624b5920ed48743b9968c63cbb2fc8629633c96fb70ddf51930ce7d4f7529e73003a344804fcc392f2904b787de8b052868c846cb4e6c04bc49a746e93cf733a0efa8fcc88bd", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) [ 1727.576453][T20917] FAULT_INJECTION: forcing a failure. [ 1727.576453][T20917] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.608931][T20917] CPU: 1 PID: 20917 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1727.619401][T20917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1727.629501][T20917] Call Trace: [ 1727.632812][T20917] [ 1727.635774][T20917] dump_stack_lvl+0x1e7/0x2d0 [ 1727.640505][T20917] ? nf_tcp_handle_invalid+0x650/0x650 [ 1727.646024][T20917] ? panic+0x770/0x770 [ 1727.650137][T20917] ? __might_sleep+0xc0/0xc0 [ 1727.654783][T20917] should_fail_ex+0x3aa/0x4e0 [ 1727.659521][T20917] should_failslab+0x9/0x20 [ 1727.664078][T20917] slab_pre_alloc_hook+0x59/0x310 [ 1727.669142][T20917] ? smack_log+0x421/0x540 [ 1727.673614][T20917] kmem_cache_alloc+0x52/0x300 [ 1727.678420][T20917] ? jbd2__journal_start+0x148/0x5d0 [ 1727.683767][T20917] jbd2__journal_start+0x148/0x5d0 [ 1727.688951][T20917] __ext4_journal_start_sb+0x215/0x5a0 [ 1727.694470][T20917] ext4_dirty_inode+0x92/0x110 [ 1727.699283][T20917] ? __ext4_expand_extra_isize+0x3d0/0x3d0 [ 1727.705133][T20917] __mark_inode_dirty+0x305/0xd90 [ 1727.710213][T20917] ext4_setattr+0x63b/0x1bb0 [ 1727.714862][T20917] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1727.720115][T20917] ? security_inode_setattr+0xd7/0x130 [ 1727.725621][T20917] ? ext4_write_inode+0x6f0/0x6f0 [ 1727.730687][T20917] notify_change+0xb99/0xe60 [ 1727.735342][T20917] chown_common+0x500/0x850 [ 1727.739909][T20917] ? __ia32_sys_chmod+0x1a0/0x1a0 [ 1727.744989][T20917] ? rcu_read_lock_any_held+0xb7/0x160 [ 1727.750510][T20917] ? __mnt_want_write+0x226/0x2a0 [ 1727.755587][T20917] do_fchownat+0x16d/0x240 [ 1727.760066][T20917] ? chown_common+0x850/0x850 [ 1727.764811][T20917] ? syscall_enter_from_user_mode+0x32/0x230 [ 1727.770843][T20917] ? lockdep_hardirqs_on+0x98/0x140 [ 1727.776095][T20917] __x64_sys_lchown+0x85/0x90 [ 1727.780828][T20917] do_syscall_64+0x41/0xc0 [ 1727.785299][T20917] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1727.791244][T20917] RIP: 0033:0x7fbc05e7cae9 [ 1727.795748][T20917] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1727.815389][T20917] RSP: 002b:00007fbc06b6f0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1727.823861][T20917] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7cae9 [ 1727.831878][T20917] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000020000080 [ 1727.839890][T20917] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1727.847897][T20917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.855908][T20917] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1727.863935][T20917] 01:36:28 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{}], [{@fowner_lt={'fowner<', 0xee01}}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) 01:36:28 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x2bc040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:28 executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="0080000000000000010000009753d1fad1357d42f2e2428719466bca586a68b2aaab1666540ec1463870979acc47b2488dccc9363a3e87e6cf8bd5285ca21790624b5920ed48743b9968c63cbb2fc8629633c96fb70ddf51930ce7d4f7529e73003a344804fcc392f2904b787de8b052868c846cb4e6c04bc49a746e93cf733a0efa8fcc88bd", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="0080000000000000010000009753d1fad1357d42f2e2428719466bca586a68b2aaab1666540ec1463870979acc47b2488dccc9363a3e87e6cf8bd5285ca21790624b5920ed48743b9968c63cbb2fc8629633c96fb70ddf51930ce7d4f7529e73003a344804fcc392f2904b787de8b052868c846cb4e6c04bc49a746e93cf733a0efa8fcc88bd", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r3, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) (async) 01:36:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000000)={0x2, 0x20, 0xffffffffffffffff, 0x20, 0x4bd5}, 0x48) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load\x00', 0x2, 0x0) 01:36:28 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (fail_nth: 15) 01:36:28 executing program 1: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) (async) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80300) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="0080000000000000010000009753d1fad1357d42f2e2428719466bca586a68b2aaab1666540ec1463870979acc47b2488dccc9363a3e87e6cf8bd5285ca21790624b5920ed48743b9968c63cbb2fc8629633c96fb70ddf51930ce7d4f7529e73003a344804fcc392f2904b787de8b052868c846cb4e6c04bc49a746e93cf733a0efa8fcc88bd", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) 01:36:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$tcp_mem(r1, &(0x7f0000000000)={0x2, 0x20, 0xffffffffffffffff, 0x20, 0x4bd5}, 0x48) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load\x00', 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$tcp_mem(r1, &(0x7f0000000000)={0x2, 0x20, 0xffffffffffffffff, 0x20, 0x4bd5}, 0x48) (async) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load\x00', 0x2, 0x0) (async) 01:36:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$tcp_mem(r1, &(0x7f0000000000)={0x2, 0x20, 0xffffffffffffffff, 0x20, 0x4bd5}, 0x48) (async) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load\x00', 0x2, 0x0) 01:36:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2100) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/185, 0xb9) 01:36:28 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x100000000}}], [{@fowner_lt={'fowner<', 0xee01}}]}) 01:36:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x8cffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1728.567162][T20956] FAULT_INJECTION: forcing a failure. [ 1728.567162][T20956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.619601][T20956] CPU: 1 PID: 20956 Comm: syz-executor.3 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1728.630167][T20956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1728.640257][T20956] Call Trace: [ 1728.643568][T20956] [ 1728.646531][T20956] dump_stack_lvl+0x1e7/0x2d0 [ 1728.651274][T20956] ? nf_tcp_handle_invalid+0x650/0x650 [ 1728.656790][T20956] ? panic+0x770/0x770 [ 1728.660912][T20956] ? snprintf+0xda/0x120 [ 1728.665208][T20956] should_fail_ex+0x3aa/0x4e0 [ 1728.669942][T20956] _copy_to_user+0x2f/0xa0 [ 1728.674407][T20956] simple_read_from_buffer+0xca/0x150 [ 1728.679834][T20956] proc_fail_nth_read+0x1e9/0x250 [ 1728.684918][T20956] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1728.690642][T20956] ? fsnotify_perm+0x420/0x5a0 [ 1728.695458][T20956] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1728.701153][T20956] vfs_read+0x279/0xb00 [ 1728.705383][T20956] ? __fdget_pos+0x2b0/0x340 [ 1728.710022][T20956] ? kernel_read+0x1f0/0x1f0 [ 1728.714671][T20956] ? __fget_files+0x28/0x4a0 [ 1728.719354][T20956] ? __fget_files+0x435/0x4a0 [ 1728.724171][T20956] ? __fdget_pos+0x2b0/0x340 [ 1728.728821][T20956] ? ksys_read+0x7b/0x2c0 [ 1728.733205][T20956] ksys_read+0x1a0/0x2c0 [ 1728.737507][T20956] ? print_irqtrace_events+0x220/0x220 [ 1728.740692][T20962] bpf: Bad value for 'mode' [ 1728.742985][T20956] ? vfs_write+0xaf0/0xaf0 [ 1728.743027][T20956] ? syscall_enter_from_user_mode+0x32/0x230 [ 1728.743057][T20956] ? lockdep_hardirqs_on+0x98/0x140 [ 1728.743084][T20956] ? syscall_enter_from_user_mode+0x32/0x230 [ 1728.743116][T20956] do_syscall_64+0x41/0xc0 [ 1728.773744][T20956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1728.779694][T20956] RIP: 0033:0x7fbc05e7b78c [ 1728.784149][T20956] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1728.804073][T20956] RSP: 002b:00007fbc06b6f0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1728.812531][T20956] RAX: ffffffffffffffda RBX: 00007fbc05f9bf80 RCX: 00007fbc05e7b78c 01:36:29 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r1, 0x9) 01:36:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2100) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/185, 0xb9) 01:36:29 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x100000000}}]}) [ 1728.820542][T20956] RDX: 000000000000000f RSI: 00007fbc06b6f130 RDI: 0000000000000003 [ 1728.828551][T20956] RBP: 00007fbc06b6f120 R08: 0000000000000000 R09: 0000000000000000 [ 1728.836649][T20956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1728.844660][T20956] R13: 000000000000000b R14: 00007fbc05f9bf80 R15: 00007ffc56fc2c48 [ 1728.852687][T20956] 01:36:29 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:29 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:29 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r1, 0x9) 01:36:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xc0ed0000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2100) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/185, 0xb9) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2100) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/185, 0xb9) (async) [ 1729.033581][T20968] bpf: Bad value for 'mode' 01:36:29 executing program 4: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r1, 0x9) 01:36:29 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$getown(r1, 0x9) 01:36:29 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$pvfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1240000, &(0x7f00000002c0)={[], [{@subj_type={'subj_type', 0x3d, 'measure'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r0}}]}) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x240886, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'K!:'}}, {@obj_role={'obj_role', 0x3d, '@,'}}, {@smackfshat={'smackfshat', 0x3d, ',}..:(}\\'}}, {@dont_appraise}, {@measure}, {@smackfstransmute}, {@dont_appraise}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x103) 01:36:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x8c5}}, {@mode={'mode', 0x3d, 0x4}}], [{@fowner_gt}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '{*:'}}, {@subj_type={'subj_type', 0x3d, ']^'}}]}) 01:36:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xf0ffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:29 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) 01:36:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0xc008, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:29 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x8c5}}, {@mode={'mode', 0x3d, 0x4}}], [{@fowner_gt}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '{*:'}}, {@subj_type={'subj_type', 0x3d, ']^'}}]}) 01:36:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xf6ffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:29 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) mount$pvfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1240000, &(0x7f00000002c0)={[], [{@subj_type={'subj_type', 0x3d, 'measure'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r0}}]}) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x240886, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'K!:'}}, {@obj_role={'obj_role', 0x3d, '@,'}}, {@smackfshat={'smackfshat', 0x3d, ',}..:(}\\'}}, {@dont_appraise}, {@measure}, {@smackfstransmute}, {@dont_appraise}]}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x103) 01:36:30 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) 01:36:30 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$pvfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1240000, &(0x7f00000002c0)={[], [{@subj_type={'subj_type', 0x3d, 'measure'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r0}}]}) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x240886, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'K!:'}}, {@obj_role={'obj_role', 0x3d, '@,'}}, {@smackfshat={'smackfshat', 0x3d, ',}..:(}\\'}}, {@dont_appraise}, {@measure}, {@smackfstransmute}, {@dont_appraise}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x103) 01:36:30 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40000, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x8c5}}, {@mode={'mode', 0x3d, 0x4}}], [{@fowner_gt}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise_type}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '{*:'}}, {@subj_type={'subj_type', 0x3d, ']^'}}]}) 01:36:30 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) mount$pvfs2(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1240000, &(0x7f00000002c0)={[], [{@subj_type={'subj_type', 0x3d, 'measure'}}, {@dont_hash}, {@uid_eq={'uid', 0x3d, r0}}]}) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x240886, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x1}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@euid_gt={'euid>', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'K!:'}}, {@obj_role={'obj_role', 0x3d, '@,'}}, {@smackfshat={'smackfshat', 0x3d, ',}..:(}\\'}}, {@dont_appraise}, {@measure}, {@smackfstransmute}, {@dont_appraise}]}) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x103) 01:36:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xffffff8c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/191, 0xbf) 01:36:30 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:30 executing program 5: mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xfffffff0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 1: chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:30 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 01:36:30 executing program 5: mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:30 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000406c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "d35faba900d2fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000416c0)={0x6e80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x7, "3ac2d9ef23d198"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000426c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000428c0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "3dabd3a46f2cb7"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000438c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043ac0)={0xffffffffffffffe1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x10, "930fa6eac0b43f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044ac0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "39db6b6d552475"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045cc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045ec0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "7907fb1583d698"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000046ec0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000470c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "08db94b85cb7e2"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000480c0)={0x8000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "8ab64af89696dc"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000490c0)={{0x0, 0xfffffffffffffff7, 0x5, 0x1, 0xe5c, 0x1, 0x1, 0x4, 0x2, 0x100, 0x100, 0x0, 0x1, 0x8001, 0x80000001}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049180)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "a14f19e2b65ac3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004a180)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "16f3fe1735089e"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b180)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "f6cd940c8f7077"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "33a9bd8a0cea10"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d380)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "13ebe96f62afda"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e380)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e580)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "e65f50e3a091b0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f580)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f780)={0xffffffffffffff80, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "18cb0e9d21a750"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000050780)={{0x0, 0xff, 0x7, 0x900000, 0x8, 0x200, 0x0, 0xff, 0x0, 0xe48f, 0x80000001, 0xc, 0xb34, 0x5, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000050800)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051a00)={0x7f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}, {0x0, r1}, {}, {0x0, r2}, {}, {r3}, {0x0, r4}, {0x0, r5}, {0x0, r6}, {}, {0x0, r7}, {}, {0x0, r8}, {}, {}, {r9}, {0x0, r10}, {}, {}, {r11, r12}, {}, {r13}, {}, {r14}, {0x0, r15}, {}, {r16}, {0x0, r17}, {}, {}, {}, {0x0, r18}, {r19}, {0x0, r20}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {r22, r23}, {r24}, {}, {}, {r25}], 0x7b, "1170f25759e114"}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xfffffff6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) 01:36:30 executing program 1: chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:30 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) (async) 01:36:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x8000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1730.475268][ T1236] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.481638][ T1236] ieee802154 phy1 wpan1: encryption failed: -22 01:36:30 executing program 5: mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:30 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r3, r4}}, './file0\x00'}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xfffffff0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 1: chdir(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:31 executing program 5: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xedc000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x30682, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:31 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) write$smackfs_logging(r1, &(0x7f0000001100)=0x1, 0x14) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) readlinkat(r1, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=""/33, 0x21) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ':'}, {}, {0x20, ')-\''}, {0x20, ':$/^'}, {0x20, '%\xa2$+'}, {0x20, '&'}, {}, {0x20, '@!,'}, {0x20, '\\-('}, {}], 0xa, "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"}, 0x1028) 01:36:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x30682, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:31 executing program 5: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) 01:36:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2000000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) write$smackfs_logging(r1, &(0x7f0000001100)=0x1, 0x14) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) readlinkat(r1, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=""/33, 0x21) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ':'}, {}, {0x20, ')-\''}, {0x20, ':$/^'}, {0x20, '%\xa2$+'}, {0x20, '&'}, {}, {0x20, '@!,'}, {0x20, '\\-('}, {}], 0xa, "033de8b3adf037fa7b2256e8e05a191ca13f9b26c429f739b326d45f136c9e3686ecf63eb8a43fb3d01be23a68a242c8d846e37b64e8c97c85395e38e483ff818f6d3a0b7c1ceecf41bfd31c621988eeed8334c9ebfbbb288f42bda4f6063812a364e2bc0a0bcd6db2423843e2c0dcbc464e1cc9a46d18ccd2f821bf424813f9c248e9fa8707bfeceff766b7e12bd8dee34effd87ace9c4cf9d84b8129594140e6a94a5f13b2eb961ea5bf0c76fa7c3d85a2c3637d47f90660369dec51770d8c9547df90c03f6cc2226f64ad1f363ae02da3019297572c2701d70864f95db1fe88077ed4be00b12c860d4fe9bcdaf3dc384eb4967726d3efe49917a2158d108b14fc0eded9e68d7642ffdc50146f70db47ffcd23b593b63966a0063c86619eab65d436462ebb5c859914f236d13b07dd295199df9911532d260861b973f10f31d9eea5c21bdb2d3ffdf92b19477beacb802ae32e86618567af9fd5d5387aeb48231de9e9114dd9bf8ad38f638dee143d1eced11b86e5781a490db3ced6eb112f5d9a226b4cb18021e3b3df06a54f3504280f87dba3dd43046d28f17cd5950cdd508c09bba18c750dd2fa2101128308f91c2a74d1d4d2f78231d2db3a1acc474f7b2a7c0a3189638c9f08a2e3354df39d8164c03cf253ed46cb475c4dead1f41774abe98a4a5f971fb9bf0d10ee1a931d463fa7617ddf9f724e9a9853de868308b5e39f65c64d33077c7e9d911bc112f4a61524516198daf1ac483b297c0a14f013d50c07fc562bbad6beb4d85582b1c7c502e2c84bd0bf086b5b3c906177d04488844a19ccdf899cf7ae738844b329daf7439e3e2a6247bf7f556b8fbc870fed0868dd911fbe5c01890688b53052978d88bf44ae1208878de55e32a2cf2c259a2a150c8ac0c69849362c471c7019b4e97641158653162d055a42ebc38aa4d0c571631a04f892ad84c3414554955d83f9618456f5b75db5044f909e17074b96ac5dfee77edca23fa9c56a15bdfbf7888e9e97f320784a563684c0c8e52c4847b6e66a5e4743b140dc3d31fe3e79c3afd76674846359e6ab91f80541366a2f5a79c7919fba146976bd170ea70f4d5bc409ab79471dacbf54933d196aee09284da83c85a5e491ce5afc6011f55b60b7ea41941567a35e287d2d92df23ad36078039cf43d6a1c8fdfc4615bb44f86a555308933c1ac13f9fce6d350e508815543f3dd706227725b8d88abe5ba580fe2d6256ecd68c9324d5f8c3a190430f17cffdfd61be0572696f8e21a1d79503ded60a4eebc3f4a69b13f4be5197e6bb0d7f4a8dd81c04316280552bfe865c323e746f50f05592a1657df95d2499177ecf81a6a7174a6e6742901c40d8dff32c061b89b47a2f196e6455bd89b67938eca90c26e528c00240d2f86b3ae963c76d34624d70c56d46022586b5ae052faed4d385a1ff63703025f0cff47e8b190654ba722876a43b62738d0beca78ff248c1db95aa3f33288379a60f4bf39be0fda03cfdc6cf0cfcc197387f142544bd5fe02c54ce5fec7d9fb103f64837ec9fef11c7ca25c77876a55481686f4be0ae0e237fee5e08eb32a2e00f73a74aecd2a06c4a2849e552fb588410ffa985d3fa85228a131d762bf9de88e94f90ce8155699891c897c3ff448751422977fa7cde67f77bae1a92d335ddc18525afeb6dc5202a6e375a42d0765a2e93a93fd4806a1619b94e6178b9cde6b15fc27e8363ac4e47d0670e2e665bf88070ca1e019f0a82c2582bb6b3ca86b9d934fc9ef3b6fe95a9055df69c273e475556fffdc67cd52751120528bed4df713e94d30b79ef4b834332577f0284ba65e783a6d4440e29310d9f501f86758bba3f15ccb4b112a5b044b8632449d62748fbc3fd46d0b464c629e984b3ac3a6a440548795b515743fcd8a3db2b35d471e0f998af87413c2ed659412243ec581730b9bdf826875987bd5c7e44f70981334f4ea06406e56456c0a99598d1856bf8e0ea526bfb0a96c955e5d97554b18b939c3db1677c22ada503a0a012016606d5e64f4e3f6f8db5c1d7d24cceb6adcfeef71c615493e4fabd4e367fae753248f3ed7fe66c34fe3026eb14461ca44e4e45610a8657852014a7bb6617ce6470ec6cce62f0feebbfd9350e6099637aa177bf2c55ed28bbf08b9cb9a32950eaceb92b6fa9d6ab2bfc4dd90866c6815518136681d7bb8e302f1207c953c5d8fe974df221a8789fe7ac2302553829280599b58ff91e94d2566a2b4b915950df494d0ad9671af32f372f347bd1fa8c36f4791a806d6a8cfe2761810617cf5d44db8fa50496d1c88c2d125b428291cc6a99e827ba8bbdc4a99fb57aa24998f129842b3104acf65eec57a2c561f6fda65b67de822d8f1969669040c8f5a9813aa8d4412e2b45a033fa9e69c29cb7cb6ac5da7adcac2a67b8bd8b503bc4e457c0aad6a2e071ce0790089f7fb69a2a995ec994c82ea177fd7e90f108f8b54875276393d0472dce4a5a162507757e404d2fae9163b573bd108b68f8689e412c890eb3f64dd75480b27a9c1428b5abc728db8492bb4413590353167fab6663f2c2b427fa0fe6fa18e09a3a1294dc614f9abad40665f24673917296a186b7a5c5ae64dfdccf1f6e692e1b33c60c69c0f497b6477c708b512fbe1af0f6b3055bcde3ffb4f5c9588cbe023d977817ac04494926dd475f490aeb1a779cd03c3c8c5021e1ebf00e74e1faa18a785bb25b2ae601fc16725b537a006ff3a4bc0c068b8be0815908a148c732d892c5b8e883c4cd4d5d66dda8b20f24de4fbb3bdb9798f5f8edaeb132920d65e75fde44e4d8f920639bb8b458d62fc06f6b96ee03d67744bf31304effc00e8bc9687a9b88d14e9b22ea7c151e64e46a7fb2d739d3ac791ee060301498399bc30b50fbf5ae2975137958c561c53bcf71e2070e800ee604e147d650b6daae31933f708714b0d2527738df5976495547049f381f5a273b98c866681e44f3d1c0a863905d567abbc5055e12de81538e4cc45657d72351a922641ee7a115359cfbfa056946ed438c0dc1936555cd0830da647a916ec78a1e76580f21257494516bb364b95e49f43e92c5794ae784a59d6d008f74e1e386fded8337e146637c34bb95f39f2ad4f087d886181676d22322b631bed6b92639ee9a942b9138f683ac49e1ed6b7dcd961d1929c2628796d8ed1eca2a91ff93bf872192128c20e4e65d82261e5bc239b365cd74ea1b990ed12c4f28f430f9ba637e7bd0d6cabfbe4449a9859d795040fb6f644488a53aabf14463027cc9db4b31720eccd4242f6841370ad601eba68e37a9109d40106a19e47b252f12d062900d661ac79f9b722abe7623925eb55e26d0a57ce5f714fa82f9678fd134cb88c5f4bbe84f1412082c59a80ffe3ff26cffd9fc714a3fa2795c5948f5ff4e1be9f154a67fd076bb5f65b30248bafeb5a302a3ec6e1012e3288b67dac5fd25fa5ae500990340295927b6a414079c1cc23aee4c47f184397e5db7efce6379b0e495ded94b54bc86cc0b3f2bafe0b86f564ed0d33e38e4bb08d897408e986358893cb909226e3b0bad53950abae8c055a3edb1efe96d238f28ff7b37605df11ac217ce3f3ff1adf544243b57985f28babae9e23e284cc92d3ca86870546d87d458b52cd794655d3237576d3efeaa4b625a0ebf232b9371688dd8873e71f7794198d9aa64afedd0ce705f69d9f307ef978d6bea615c013cb21cb1908ea3e0a34435ef31d349c45c46282992bc942b9b212fc136ef6acf61a7da73ce67291af1054d737ae6dddeb8218f59540b8bdc356fd63099c3a61eb7afcf31a8bafb07e7f31d10cb3e3bb4d47931271b5d2883288d8350d5a1c69f625307db7b45f0d95df3f3e68b976fab106cda939253eac968e2f6d1d96be70de821dc9a146f06145b49dd1dd9ef49964805e07d6de9ab41fc1db7d230f89be8e886f231f93378bb7734368674aedc6ca404d68c7caff2f651914596075617c609c36c17475d0dc91efe74e023d1d8bc775a66322b15ba355af352264b49f1bd27bfb9cd2f5a5cc9d4dd62eecd4744bda5fe8871bfe5c09816d504d18c103124d7eb687e3096291cfc209148cf68dd2cd70772daf5d938287e1d9576eaa1378e4d0280d31ad62097a765fd7af2a9fd36a486d743b50672ff1cdcacdbaa24f77b1ec98ba83dd031baee05d1663dffde6dbe5322f9ef1fdd8e669d5144e071ba21abe973b32182ecf9b7f4164945918915b4745b33352354ef185060f3bf8808baebb2e537eddb49e91784cce82680eab783a381414e17b8c11210ecdfc1c55d5aa92b2d6be447aea966f7789dd3cafcdc1141ada8d60d3a14d73a6f25d3bca061a623618d7b4b136ca63627237053abd34cd6cfab43f73ec539744d45b4610abc778033fe72baad1d8ee42f0b306eb82dc9d5134ed8ea421c1f77cb13ddb7b4684dcefe04a92043b2b2d8ecd310cc01df1a1c0fa3d5c8f551d7b6097386f7b4a65a14afda4b4947bffdd7d2c14e7e0794c08459ed1219816cfa0173bd9e1e3c6e9f315f5e8127fdeb41b4b556405a11c74a8f28f58231d720527b70bcc89a011b20da04b28792ff81d29c8c82182a351767d3120570b6ad881be6b54d38af61ebbd8fe72a9b5e3e46f566c3dad99d67c1db7b0b3a4279b77e59edb465accc9ea16753d52afb491e9fb43020b81dfc7932d3da5349c80ccad736e9484d3e99695e30181d28eec7e69808ca20fbbc4268b0cd81b7f3e166147c4e9c08008f576193f52970e31b490b990e16922635fdf852c258fda0e81efbaa3b45b75f04cc56a0b3bb070c8250a6ba5156fd3fc2ba23596c235a7ab49c169544f76ff42a28930aa386335700e29213504b972c445fb42c01c046dbef057ea2b34ffd1d0b3f3c2f54795289486fe355495cef4104e3dbe16c28a31e4442bf13c146864267717ee9b2b20e588bac4ed341e3c33f24a5c6d92293b5f98cc0bb7d9e6812772350b88219e8a72ddc904e54ed1861a8f635e6057194d29d300d5e5a23a2416effd019858a6724490b7334a5832a54f2658a3a5df5894cc549d9d7843c05750129d81e251b468e75ccb50682cb4d328ddfc7af1ed28b4c524c42b7ffe868bde083c5fd5363b3b9a5cf2a4f2b001a852e817a0fe437776abefad30a1ea9fbf553ec9257a17ef0c3e2e897c762a2b3e28a2900a967e26064dd19bd657df4c07bd1fb631bca7dceb1d5c6c708bccb6b1be048d6fce0e07232774e3ea8cb879d914b8e4e1b2bad35beb9959d230c86e25b2e8bc46c050468c82a748a8b02cc1570cdf8b84b29b06a2c4c3e88f572ecae1a970f68509806c255e32081fd258a4a574937d94c20edd26d0042d480b854702a60f62be5790772d5b9465dfc485660d500c633a48537d0f354c52ef9a00fd8f881c810986315b25da67be3948721f4e61c8c67a65a38f93cd458485aaa21c9878d2c5eef85f82e4cfe2b793d2169819b6b3c40b36dadbab5e7b08a88ac65ab43977deb87d8ce6eedfb1e86a8a919b58031fa1f1c77380ca166081973be4ecab3135066c52b7cd13a8ceeb36efe4cea012123935fd980ff8952a500556e4815bc37146414e84c34c2923bda445759d36cab37a96af20951564dc05ad7b6e11ac4c64986a1de84aad6a6d791485e523e415ffae26420c10b744a7b1a44dd58ca5432871c12b84c0ae5e0e8541d3a695ca344bfa372f41e391956c6b3944d7021779ca8eb064ee134ad5d05c1763307528e35a0325a39f259fc1e282ab346a446a1d9e3a21510aedbee389684"}, 0x1028) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) write$smackfs_logging(r1, &(0x7f0000001100)=0x1, 0x14) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) readlinkat(r1, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=""/33, 0x21) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) (async) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ':'}, {}, {0x20, ')-\''}, {0x20, ':$/^'}, {0x20, '%\xa2$+'}, {0x20, '&'}, {}, {0x20, '@!,'}, {0x20, '\\-('}, {}], 0xa, "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"}, 0x1028) (async) 01:36:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) (async) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) (async) 01:36:31 executing program 5: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2010000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x30682, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:31 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) write$smackfs_logging(r1, &(0x7f0000001100)=0x1, 0x14) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) readlinkat(r1, &(0x7f0000001140)='./file0\x00', &(0x7f0000001180)=""/33, 0x21) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) r2 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, ':'}, {}, {0x20, ')-\''}, {0x20, ':$/^'}, {0x20, '%\xa2$+'}, {0x20, '&'}, {}, {0x20, '@!,'}, {0x20, '\\-('}, {}], 0xa, "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"}, 0x1028) 01:36:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) 01:36:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x4e00000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:31 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c494e45202753796e7468204361707475726520537769746330303030303030300a545245424c4520274d6173746572024361707475726520537769746368272030303030303030303030303030303030303030300a535045414b45520afcffffff0a"], 0x72) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$smackfs_labels_list(r5, &(0x7f0000000380)={[{' \''}, {'/dev/ubi_ctrl\x00'}, {'Master Capture Switch'}]}, 0x29) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x105080, 0x0) r7 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r7, 0x0, 0x0) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7, {r8, r9}}, './file0\x00'}) fstat(r4, &(0x7f0000000280)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x5, 0x2, 0x1, 0xb1a, 0xd4, 0x6, 0x1, 0x5, 0x6, 0x4, 0x100000000, 0x5ba39691, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') 01:36:32 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x225c22, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@flag='async'}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r2}}]}}, 0x0, 0x0, &(0x7f0000000480)="60bfab5bfabdc5") 01:36:32 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 4: mount$bpf(0x4e, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x8cffffff00000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$proc_mixer(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c494e45202753796e7468204361707475726520537769746330303030303030300a545245424c4520274d6173746572024361707475726520537769746368272030303030303030303030303030303030303030300a535045414b45520afcffffff0a"], 0x72) (async, rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 64) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$smackfs_labels_list(r5, &(0x7f0000000380)={[{' \''}, {'/dev/ubi_ctrl\x00'}, {'Master Capture Switch'}]}, 0x29) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x105080, 0x0) (async) r7 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r7, 0x0, 0x0) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7, {r8, r9}}, './file0\x00'}) (async) fstat(r4, &(0x7f0000000280)) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x5, 0x2, 0x1, 0xb1a, 0xd4, 0x6, 0x1, 0x5, 0x6, 0x4, 0x100000000, 0x5ba39691, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000140)='./file0\x00') 01:36:32 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x225c22, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@flag='async'}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r2}}]}}, 0x0, 0x0, &(0x7f0000000480)="60bfab5bfabdc5") 01:36:32 executing program 4: mount$bpf(0x4e, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xf0ffffff00000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:32 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x100, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x225c22, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@flag='async'}, {@context={'context', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r2}}]}}, 0x0, 0x0, &(0x7f0000000480)="60bfab5bfabdc5") 01:36:32 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xf6ffffff00000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$proc_mixer(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="4c494e45202753796e7468204361707475726520537769746330303030303030300a545245424c4520274d6173746572024361707475726520537769746368272030303030303030303030303030303030303030300a535045414b45520afcffffff0a"], 0x72) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (rerun: 64) write$smackfs_labels_list(r5, &(0x7f0000000380)={[{' \''}, {'/dev/ubi_ctrl\x00'}, {'Master Capture Switch'}]}, 0x29) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x105080, 0x0) r7 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r7, 0x0, 0x0) (async, rerun: 32) fstat(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r7, {r8, r9}}, './file0\x00'}) (async) fstat(r4, &(0x7f0000000280)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0x0, 0x5, 0x2, 0x1, 0xb1a, 0xd4, 0x6, 0x1, 0x5, 0x6, 0x4, 0x100000000, 0x5ba39691, 0x5}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') 01:36:32 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4e, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:32 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:32 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4accaefa32b6026d}}, './file0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1732.343898][ T28] kauditd_printk_skb: 35325 callbacks suppressed [ 1732.343916][ T28] audit: type=1400 audit(1697852192.764:2803578): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21158 comm="modprobe" name="lib" dev="sda1" ino=239 [ 1732.369657][T21160] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.371369][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.384979][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.387339][T21158] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.391527][ T4471] audit: audit_lost=966088 audit_rate_limit=0 audit_backlog_limit=64 [ 1732.391548][ T4471] audit: backlog limit exceeded [ 1732.401500][T21161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.413774][ T5048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.417920][T21159] audit: audit_backlog=65 > audit_backlog_limit=64 01:36:32 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 01:36:32 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"4bafea7e1b8b735e9e513351bf31c4fc", 0x0, 0x0, {0x5, 0x2}, {0x100, 0xae00000}, 0x8, [0x0, 0x400, 0x9, 0x2, 0x0, 0x4, 0x1000, 0x37c55cdd, 0x788, 0x6, 0x3, 0x9, 0x0, 0x0, 0x9, 0x2]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:33 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4accaefa32b6026d}}, './file0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:33 executing program 4: mount$bpf(0x4e, 0x0, &(0x7f0000000080), 0x0, 0x0) 01:36:33 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1020, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 01:36:33 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"4bafea7e1b8b735e9e513351bf31c4fc", 0x0, 0x0, {0x5, 0x2}, {0x100, 0xae00000}, 0x8, [0x0, 0x400, 0x9, 0x2, 0x0, 0x4, 0x1000, 0x37c55cdd, 0x788, 0x6, 0x3, 0x9, 0x0, 0x0, 0x9, 0x2]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:33 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4accaefa32b6026d}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:33 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='rdma.max\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4accaefa32b6026d}}, './file0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:33 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) 01:36:33 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000000)={"4bafea7e1b8b735e9e513351bf31c4fc", 0x0, 0x0, {0x5, 0x2}, {0x100, 0xae00000}, 0x8, [0x0, 0x400, 0x9, 0x2, 0x0, 0x4, 0x1000, 0x37c55cdd, 0x788, 0x6, 0x3, 0x9, 0x0, 0x0, 0x9, 0x2]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:33 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000000c0)) 01:36:33 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:33 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000000c0)) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) (async) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000000c0)) (async) 01:36:33 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 01:36:33 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/229, 0xe5) 01:36:34 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file1\x00'}) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x40, &(0x7f00000000c0)) 01:36:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4e00, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 01:36:34 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/229, 0xe5) 01:36:34 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) 01:36:34 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000000), 0x12) 01:36:34 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/229, 0xe5) 01:36:34 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x80000000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000000)='.^/!\'\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x48401, &(0x7f00000001c0)={[{}], [{@audit}, {@uid_gt={'uid>', r0}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:34 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000002c0)='io.pressure\x00', 0x2, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/229, 0xe5) 01:36:34 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:36:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xedc0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:34 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x80000000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000000)='.^/!\'\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x48401, &(0x7f00000001c0)={[{}], [{@audit}, {@uid_gt={'uid>', r0}}]}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:34 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:36:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x20000000, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:34 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:34 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x80000000) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$nfs4(&(0x7f0000000000)='.^/!\'\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x48401, &(0x7f00000001c0)={[{}], [{@audit}, {@uid_gt={'uid>', r0}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x80000000) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) (async) mount$nfs4(&(0x7f0000000000)='.^/!\'\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x48401, &(0x7f00000001c0)={[{}], [{@audit}, {@uid_gt={'uid>', r0}}]}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:34 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:36:34 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x2000000000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 01:36:35 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:35 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 01:36:35 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20100000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) 01:36:35 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 01:36:35 executing program 4: mount$bpf(0x4e, 0x0, 0x0, 0x0, 0x0) 01:36:35 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:35 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4e000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000000)='./file0\x00') (async) chroot(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 01:36:35 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x200600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) 01:36:35 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:35 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) 01:36:35 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x0) (async, rerun: 32) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) chroot(&(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 01:36:35 executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0xedc000000000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9140, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:35 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) (async) fspick(r0, &(0x7f0000000040)='./file0\x00', 0x1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:35 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8cffffff, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:35 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) write$capi20(r0, &(0x7f0000000040)={0x10, 0x7f, 0xff, 0x81, 0x0, 0x80000001}, 0x10) 01:36:36 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:36 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0002, 0x8) 01:36:36 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9140, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9140, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:36 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:36:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:36 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:36 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:36 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9140, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9140, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:36 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0002, 0x8) 01:36:36 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:36:36 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:36 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf0ffffff, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:36 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) (async) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:36:36 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:36:36 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0002, 0x8) 01:36:36 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:36 executing program 5: open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:36 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:36:36 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf6ffffff, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:36 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:36 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '*^/#'}], 0xa, "4fa68e1d4b8c3529ad0fd7dc7311761d9c8da4ea42a962ed1bee5821df98c01497bac351b91b0063fdcb0008bea17a21d1ffffeb0000000000c19a00000000"}, 0x4f) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:36:36 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101001, 0x152) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000040)='./file0\x00') 01:36:36 executing program 5: open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:37 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:36:37 executing program 5: open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:37 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xffffff8c, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:37 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '*^/#'}], 0xa, "4fa68e1d4b8c3529ad0fd7dc7311761d9c8da4ea42a962ed1bee5821df98c01497bac351b91b0063fdcb0008bea17a21d1ffffeb0000000000c19a00000000"}, 0x4f) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:36:37 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x101001, 0x152) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) chroot(&(0x7f0000000040)='./file0\x00') 01:36:37 executing program 2: write$smackfs_cipsonum(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x14) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x290300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:37 executing program 5: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xfffffff0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:37 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '*^/#'}], 0xa, "4fa68e1d4b8c3529ad0fd7dc7311761d9c8da4ea42a962ed1bee5821df98c01497bac351b91b0063fdcb0008bea17a21d1ffffeb0000000000c19a00000000"}, 0x4f) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:36:37 executing program 4: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:37 executing program 2: write$smackfs_cipsonum(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x14) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x290300) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:37 executing program 5: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:37 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101001, 0x152) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chroot(&(0x7f0000000040)='./file0\x00') 01:36:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:37 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/199, 0xc7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sr0, 0xee01, 0x0) 01:36:37 executing program 4: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:37 executing program 5: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000, 0x24) 01:36:37 executing program 2: write$smackfs_cipsonum(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x14) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x290300) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$smackfs_cipsonum(0xffffffffffffffff, &(0x7f0000000000)=0x7, 0x14) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x290300) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:37 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000440100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1737.354352][ T28] kauditd_printk_skb: 37735 callbacks suppressed [ 1737.354371][ T28] audit: type=1400 audit(1697852197.774:2824182): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21429 comm="syz-executor.3" name="/" dev="proc" ino=1 [ 1737.379645][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1737.379667][ T4482] audit: audit_lost=971898 audit_rate_limit=0 audit_backlog_limit=64 [ 1737.379684][ T4482] audit: backlog limit exceeded 01:36:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8000000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1737.379705][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1737.381540][ T5056] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1737.389612][T21430] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1737.396875][T21434] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1737.407720][T21431] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1737.412802][T21433] audit: audit_backlog=66 > audit_backlog_limit=64 01:36:37 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4, 0x4}}, 0x10) r6 = open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x40) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'r\x00'}, 0x8) 01:36:37 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/199, 0xc7) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sr0, 0xee01, 0x0) 01:36:37 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x4000, 0x24) 01:36:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xedc000000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:38 executing program 4: mknod(0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:38 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4, 0x4}}, 0x10) r6 = open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x40) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'r\x00'}, 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4, 0x4}}, 0x10) (async) open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x40) (async) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'r\x00'}, 0x8) (async) 01:36:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000440100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:38 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x4000, 0x24) 01:36:38 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/199, 0xc7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sr0, 0xee01, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)=""/199, 0xc7) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@sr0, 0xee01, 0x0) (async) 01:36:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000000000000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:38 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x4000, 0x24) 01:36:38 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000080)={0x4, 0x8, 0xfa00, {r4, 0x4}}, 0x10) (async, rerun: 32) r6 = open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x40) (rerun: 32) write$cgroup_devices(r6, &(0x7f00000002c0)={'a', ' *:* ', 'r\x00'}, 0x8) 01:36:38 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 01:36:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000440100000018000000", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:38 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x142, 0x60) 01:36:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2010000000000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:38 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24) 01:36:38 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 01:36:38 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:38 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x142, 0x60) 01:36:38 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'team_slave_1', 0x32, 0x33}, 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) 01:36:38 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4e00000000000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:38 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) 01:36:38 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x142, 0x60) 01:36:38 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async, rerun: 64) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x4, 0x2) (rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 01:36:38 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'team_slave_1', 0x32, 0x33}, 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'team_slave_1', 0x32, 0x33}, 0xf) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) 01:36:39 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:39 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8cffffff00000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:39 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'team_slave_1', 0x32, 0x33}, 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'team_slave_1', 0x32, 0x33}, 0xf) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) (async) 01:36:39 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 5: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xfffffff6, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:39 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf0ffffff00000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:39 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:39 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@mmap}, {@cache_fscache}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000040)={0x8f, 0x2, 0x1, 0xe04bec3b48717bed}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:39 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x60) 01:36:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xf6ffffff00000000, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:39 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:39 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro', 0x8}]}) 01:36:39 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:36:39 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '*^/#'}], 0xa, "4fa68e1d4b8c3529ad0fd7dc7311761d9c8da4ea42a962ed1bee5821df98c01497bac351b91b0063fdcb0008bea17a21d1ffffeb0000000000c19a00000000"}, 0x4f) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) [ 1739.462664][T21541] 9pnet: Could not find request transport: xen 01:36:39 executing program 4: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:40 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@mmap}, {@cache_fscache}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000040)={0x8f, 0x2, 0x1, 0xe04bec3b48717bed}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@mmap}, {@cache_fscache}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000040)={0x8f, 0x2, 0x1, 0xe04bec3b48717bed}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:40 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x3e) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:40 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) fcntl$getown(r0, 0x9) 01:36:40 executing program 5: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 01:36:40 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x3e) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:40 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:40 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4c0002, 0x8) 01:36:40 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) fcntl$getown(r0, 0x9) [ 1739.882790][T21570] 9pnet: Could not find request transport: xen [ 1739.883049][T21574] 9pnet: Could not find request transport: xen 01:36:40 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x3e) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:40 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@mmap}, {@cache_fscache}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000040)={0x8f, 0x2, 0x1, 0xe04bec3b48717bed}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10000, &(0x7f0000000240)={'trans=xen,', {[{@cache_loose}, {@access_uid={'access', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.'}}, {@mmap}, {@cache_fscache}, {@cache_loose}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@permit_directio}]}}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) quotactl$Q_SETINFO(0x1, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f0000000040)={0x8f, 0x2, 0x1, 0xe04bec3b48717bed}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:40 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x142, 0x60) 01:36:40 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 1) 01:36:40 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) 01:36:40 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) fcntl$getown(r0, 0x9) [ 1740.196890][T21590] 9pnet: Could not find request transport: xen 01:36:40 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 1) 01:36:40 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@max_read={'max_read', 0x3d, 0x664}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="081f2f2735c9c0dd2d0c604590e6625b45827675122a5852725fc6e1afd649a16ea1b2174d96d36e5e001858dea0269a474aa8369249bfd038f0b61a00ee91995e7b99052a02fb9a0bc2680a7163583bba755d2d32222add0222e08ad3d63501d268fe3cbec26f166c718cb4dbdfb181fbd844f8e180a27abf3fb6f06fb10f049738bf50092b826918f2621c110692d366d65875ecf12a8073958a82b105e85b450d2903d10c0e7f3dd930c9b237c7ddc8ee17d27e") chroot(&(0x7f0000002140)='./file0\x00') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1740.349003][T21601] FAULT_INJECTION: forcing a failure. [ 1740.349003][T21601] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.393433][T21601] CPU: 0 PID: 21601 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1740.403905][T21601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1740.413999][T21601] Call Trace: [ 1740.417310][T21601] [ 1740.420270][T21601] dump_stack_lvl+0x1e7/0x2d0 [ 1740.425017][T21601] ? nf_tcp_handle_invalid+0x650/0x650 [ 1740.430532][T21601] ? panic+0x770/0x770 [ 1740.434652][T21601] ? __might_sleep+0xc0/0xc0 [ 1740.439295][T21601] should_fail_ex+0x3aa/0x4e0 [ 1740.444022][T21601] should_failslab+0x9/0x20 [ 1740.448571][T21601] slab_pre_alloc_hook+0x59/0x310 [ 1740.453735][T21601] kmem_cache_alloc+0x52/0x300 [ 1740.458540][T21601] ? getname_flags+0xbc/0x4f0 [ 1740.463261][T21601] getname_flags+0xbc/0x4f0 [ 1740.467805][T21601] ? build_open_flags+0x448/0x5b0 [ 1740.472889][T21601] do_sys_openat2+0xd2/0x1d0 [ 1740.477534][T21601] ? mutex_unlock+0x10/0x10 [ 1740.482093][T21601] ? do_sys_open+0x230/0x230 [ 1740.486745][T21601] __x64_sys_open+0x225/0x270 [ 1740.491474][T21601] ? do_sys_openat2+0x1d0/0x1d0 [ 1740.496381][T21601] ? syscall_enter_from_user_mode+0x32/0x230 [ 1740.502421][T21601] ? lockdep_hardirqs_on+0x98/0x140 [ 1740.507665][T21601] ? syscall_enter_from_user_mode+0x32/0x230 [ 1740.513709][T21601] do_syscall_64+0x41/0xc0 [ 1740.518264][T21601] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1740.524212][T21601] RIP: 0033:0x7fe88767cae9 [ 1740.528749][T21601] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1740.548392][T21601] RSP: 002b:00007fe8884680c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1740.556857][T21601] RAX: ffffffffffffffda RBX: 00007fe88779bf80 RCX: 00007fe88767cae9 [ 1740.564861][T21601] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 0000000020000000 [ 1740.572866][T21601] RBP: 00007fe888468120 R08: 0000000000000000 R09: 0000000000000000 [ 1740.580876][T21601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.588884][T21601] R13: 000000000000000b R14: 00007fe88779bf80 R15: 00007ffea59a4068 [ 1740.596912][T21601] 01:36:41 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) 01:36:41 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}], 0x4e}) [ 1740.750870][T21610] FAULT_INJECTION: forcing a failure. [ 1740.750870][T21610] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.787610][T21611] fuse: Bad value for 'user_id' [ 1740.793977][T21610] CPU: 0 PID: 21610 Comm: syz-executor.5 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1740.804450][T21610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1740.814611][T21610] Call Trace: [ 1740.817934][T21610] [ 1740.820928][T21610] dump_stack_lvl+0x1e7/0x2d0 [ 1740.825661][T21610] ? nf_tcp_handle_invalid+0x650/0x650 [ 1740.831174][T21610] ? panic+0x770/0x770 [ 1740.835288][T21610] ? __might_sleep+0xc0/0xc0 [ 1740.839943][T21610] should_fail_ex+0x3aa/0x4e0 [ 1740.844671][T21610] should_failslab+0x9/0x20 [ 1740.849217][T21610] slab_pre_alloc_hook+0x59/0x310 [ 1740.854285][T21610] kmem_cache_alloc+0x52/0x300 [ 1740.859108][T21610] ? getname_flags+0xbc/0x4f0 [ 1740.863837][T21610] getname_flags+0xbc/0x4f0 [ 1740.868386][T21610] ? build_open_flags+0x448/0x5b0 [ 1740.873465][T21610] do_sys_openat2+0xd2/0x1d0 [ 1740.878105][T21610] ? mutex_unlock+0x10/0x10 [ 1740.882653][T21610] ? do_sys_open+0x230/0x230 [ 1740.887307][T21610] __x64_sys_open+0x225/0x270 [ 1740.892036][T21610] ? do_sys_openat2+0x1d0/0x1d0 [ 1740.896945][T21610] ? syscall_enter_from_user_mode+0x32/0x230 [ 1740.902973][T21610] ? lockdep_hardirqs_on+0x98/0x140 [ 1740.908230][T21610] ? syscall_enter_from_user_mode+0x32/0x230 [ 1740.914247][T21610] do_syscall_64+0x41/0xc0 [ 1740.918686][T21610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1740.924600][T21610] RIP: 0033:0x7f323a67cae9 [ 1740.929026][T21610] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1740.948645][T21610] RSP: 002b:00007f323b3af0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1740.957079][T21610] RAX: ffffffffffffffda RBX: 00007f323a79c050 RCX: 00007f323a67cae9 [ 1740.965064][T21610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1740.973046][T21610] RBP: 00007f323b3af120 R08: 0000000000000000 R09: 0000000000000000 [ 1740.981022][T21610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1740.988998][T21610] R13: 000000000000006e R14: 00007f323a79c050 R15: 00007fffa4b35338 [ 1740.997079][T21610] 01:36:41 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 2) 01:36:41 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) 01:36:41 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f00000000c0)) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@max_read={'max_read', 0x3d, 0x664}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="081f2f2735c9c0dd2d0c604590e6625b45827675122a5852725fc6e1afd649a16ea1b2174d96d36e5e001858dea0269a474aa8369249bfd038f0b61a00ee91995e7b99052a02fb9a0bc2680a7163583bba755d2d32222add0222e08ad3d63501d268fe3cbec26f166c718cb4dbdfb181fbd844f8e180a27abf3fb6f06fb10f049738bf50092b826918f2621c110692d366d65875ecf12a8073958a82b105e85b450d2903d10c0e7f3dd930c9b237c7ddc8ee17d27e") (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@max_read={'max_read', 0x3d, 0x664}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="081f2f2735c9c0dd2d0c604590e6625b45827675122a5852725fc6e1afd649a16ea1b2174d96d36e5e001858dea0269a474aa8369249bfd038f0b61a00ee91995e7b99052a02fb9a0bc2680a7163583bba755d2d32222add0222e08ad3d63501d268fe3cbec26f166c718cb4dbdfb181fbd844f8e180a27abf3fb6f06fb10f049738bf50092b826918f2621c110692d366d65875ecf12a8073958a82b105e85b450d2903d10c0e7f3dd930c9b237c7ddc8ee17d27e") chroot(&(0x7f0000002140)='./file0\x00') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:41 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 2) [ 1741.152782][T21620] FAULT_INJECTION: forcing a failure. [ 1741.152782][T21620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.203348][T21620] CPU: 0 PID: 21620 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1741.213841][T21620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1741.223942][T21620] Call Trace: [ 1741.227264][T21620] [ 1741.230231][T21620] dump_stack_lvl+0x1e7/0x2d0 [ 1741.235052][T21620] ? nf_tcp_handle_invalid+0x650/0x650 [ 1741.240567][T21620] ? panic+0x770/0x770 [ 1741.244688][T21620] ? __lock_acquire+0x7f70/0x7f70 [ 1741.249767][T21620] should_fail_ex+0x3aa/0x4e0 [ 1741.254500][T21620] strncpy_from_user+0x36/0x2e0 [ 1741.255474][T21624] fuse: Bad value for 'user_id' [ 1741.259385][T21620] getname_flags+0xf9/0x4f0 [ 1741.259421][T21620] do_sys_openat2+0xd2/0x1d0 [ 1741.273415][T21620] ? mutex_unlock+0x10/0x10 [ 1741.277970][T21620] ? do_sys_open+0x230/0x230 [ 1741.282613][T21620] __x64_sys_open+0x225/0x270 [ 1741.287325][T21620] ? do_sys_openat2+0x1d0/0x1d0 [ 1741.292197][T21620] ? syscall_enter_from_user_mode+0x32/0x230 [ 1741.298190][T21620] ? lockdep_hardirqs_on+0x98/0x140 [ 1741.303504][T21620] ? syscall_enter_from_user_mode+0x32/0x230 [ 1741.309502][T21620] do_syscall_64+0x41/0xc0 [ 1741.313946][T21620] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1741.319873][T21620] RIP: 0033:0x7fe88767cae9 [ 1741.324300][T21620] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1741.343922][T21620] RSP: 002b:00007fe8884470c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 01:36:41 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x4, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f0000000140)={0x8, 0xcc8deff8e361809f, 0x1a0000}, 0x20) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xf7820, &(0x7f0000000000)=ANY=[@ANYBLOB="7063723d303030303030303030389c44ad968d090dbaad3263bb"]) [ 1741.352351][T21620] RAX: ffffffffffffffda RBX: 00007fe88779c050 RCX: 00007fe88767cae9 [ 1741.360342][T21620] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 0000000020000000 [ 1741.368330][T21620] RBP: 00007fe888447120 R08: 0000000000000000 R09: 0000000000000000 [ 1741.376317][T21620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.384301][T21620] R13: 000000000000006e R14: 00007fe88779c050 R15: 00007ffea59a4068 [ 1741.392298][T21620] [ 1741.517275][T21626] fuse: Bad value for 'user_id' 01:36:42 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 64) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x80000000}}, {@max_read={'max_read', 0x3d, 0x664}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="081f2f2735c9c0dd2d0c604590e6625b45827675122a5852725fc6e1afd649a16ea1b2174d96d36e5e001858dea0269a474aa8369249bfd038f0b61a00ee91995e7b99052a02fb9a0bc2680a7163583bba755d2d32222add0222e08ad3d63501d268fe3cbec26f166c718cb4dbdfb181fbd844f8e180a27abf3fb6f06fb10f049738bf50092b826918f2621c110692d366d65875ecf12a8073958a82b105e85b450d2903d10c0e7f3dd930c9b237c7ddc8ee17d27e") (async) chroot(&(0x7f0000002140)='./file0\x00') (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:42 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x6000) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lstat(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10e9e9078a7d8015) mount$9p_unix(&(0x7f0000000400)='./file3\x00', &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10, &(0x7f0000000580)={'trans=unix,', {[{@cache_none}, {@loose}, {@access_user}], [{@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '*@\xbf$@'}}, {@seclabel}]}}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$nfs4(&(0x7f00000001c0)='+%(%*\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x200002, &(0x7f0000000280)={[{}, {}, {'*@\xbf$@'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x6, 0x6, 0x33, 0x31, 0x0, 0x32, 0x33], 0x2d, [0x37, 0x32, 0x63, 0x35], 0x2d, [0x37, 0x30, 0x31, 0x36], 0x2d, [0x66, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x32, 0x34, 0x36, 0x65, 0x39, 0x31, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@flag='async'}, {@smackfsroot={'smackfsroot', 0x3d, '//('}}]}) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) 01:36:42 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 3) [ 1741.618308][T21628] FAULT_INJECTION: forcing a failure. [ 1741.618308][T21628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1741.664716][T21628] CPU: 1 PID: 21628 Comm: syz-executor.5 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1741.675193][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1741.685287][T21628] Call Trace: [ 1741.688605][T21628] [ 1741.691584][T21628] dump_stack_lvl+0x1e7/0x2d0 [ 1741.696337][T21628] ? nf_tcp_handle_invalid+0x650/0x650 [ 1741.701824][T21628] ? panic+0x770/0x770 [ 1741.705921][T21628] ? __lock_acquire+0x7f70/0x7f70 [ 1741.710977][T21628] should_fail_ex+0x3aa/0x4e0 [ 1741.715685][T21628] strncpy_from_user+0x36/0x2e0 [ 1741.720558][T21628] getname_flags+0xf9/0x4f0 [ 1741.725084][T21628] do_sys_openat2+0xd2/0x1d0 [ 1741.729694][T21628] ? mutex_unlock+0x10/0x10 [ 1741.734219][T21628] ? do_sys_open+0x230/0x230 [ 1741.738839][T21628] __x64_sys_open+0x225/0x270 [ 1741.743635][T21628] ? do_sys_openat2+0x1d0/0x1d0 [ 1741.748506][T21628] ? syscall_enter_from_user_mode+0x32/0x230 [ 1741.754513][T21628] ? lockdep_hardirqs_on+0x98/0x140 [ 1741.759745][T21628] ? syscall_enter_from_user_mode+0x32/0x230 [ 1741.765753][T21628] do_syscall_64+0x41/0xc0 [ 1741.770194][T21628] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1741.776109][T21628] RIP: 0033:0x7f323a67cae9 [ 1741.780537][T21628] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1741.800155][T21628] RSP: 002b:00007f323b3d00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1741.808584][T21628] RAX: ffffffffffffffda RBX: 00007f323a79bf80 RCX: 00007f323a67cae9 [ 1741.816563][T21628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1741.824544][T21628] RBP: 00007f323b3d0120 R08: 0000000000000000 R09: 0000000000000000 [ 1741.832520][T21628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1741.840499][T21628] R13: 000000000000000b R14: 00007f323a79bf80 R15: 00007fffa4b35338 [ 1741.848497][T21628] [ 1741.953512][T21636] FAULT_INJECTION: forcing a failure. [ 1741.953512][T21636] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.973298][T21636] CPU: 1 PID: 21636 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1741.983776][T21636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1741.993871][T21636] Call Trace: [ 1741.997189][T21636] [ 1742.000157][T21636] dump_stack_lvl+0x1e7/0x2d0 [ 1742.004897][T21636] ? nf_tcp_handle_invalid+0x650/0x650 [ 1742.010414][T21636] ? panic+0x770/0x770 [ 1742.014523][T21636] ? __might_sleep+0xc0/0xc0 [ 1742.019162][T21636] should_fail_ex+0x3aa/0x4e0 [ 1742.023884][T21636] should_failslab+0x9/0x20 [ 1742.028437][T21636] slab_pre_alloc_hook+0x59/0x310 [ 1742.033511][T21636] kmem_cache_alloc+0x52/0x300 [ 1742.038312][T21636] ? alloc_empty_file+0x9e/0x1d0 [ 1742.043298][T21636] alloc_empty_file+0x9e/0x1d0 [ 1742.048112][T21636] path_openat+0xfa/0x3180 [ 1742.052578][T21636] ? verify_lock_unused+0x140/0x140 [ 1742.057839][T21636] ? kasan_set_track+0x4f/0x70 [ 1742.062651][T21636] ? __kasan_slab_alloc+0x66/0x70 [ 1742.067720][T21636] ? kmem_cache_alloc+0x123/0x300 [ 1742.072782][T21636] ? getname_flags+0xbc/0x4f0 [ 1742.077502][T21636] ? do_sys_openat2+0xd2/0x1d0 [ 1742.082311][T21636] ? __x64_sys_open+0x225/0x270 [ 1742.087207][T21636] ? do_syscall_64+0x41/0xc0 [ 1742.091856][T21636] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1742.098073][T21636] ? do_filp_open+0x490/0x490 [ 1742.102811][T21636] do_filp_open+0x234/0x490 [ 1742.107366][T21636] ? vfs_tmpfile+0x4b0/0x4b0 [ 1742.112025][T21636] ? _raw_spin_unlock+0x28/0x40 [ 1742.116924][T21636] ? alloc_fd+0x59c/0x640 [ 1742.121295][T21636] do_sys_openat2+0x13e/0x1d0 [ 1742.126015][T21636] ? mutex_unlock+0x10/0x10 [ 1742.127488][T21639] FAULT_INJECTION: forcing a failure. [ 1742.127488][T21639] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.130538][T21636] ? do_sys_open+0x230/0x230 [ 1742.130589][T21636] __x64_sys_open+0x225/0x270 01:36:42 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 3) 01:36:42 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x4, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f0000000140)={0x8, 0xcc8deff8e361809f, 0x1a0000}, 0x20) (async) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xf7820, &(0x7f0000000000)=ANY=[@ANYBLOB="7063723d303030303030303030389c44ad968d090dbaad3263bb"]) [ 1742.152708][T21636] ? do_sys_openat2+0x1d0/0x1d0 [ 1742.157614][T21636] ? syscall_enter_from_user_mode+0x32/0x230 [ 1742.163635][T21636] ? lockdep_hardirqs_on+0x98/0x140 [ 1742.168869][T21636] ? syscall_enter_from_user_mode+0x32/0x230 [ 1742.174886][T21636] do_syscall_64+0x41/0xc0 [ 1742.179359][T21636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1742.185298][T21636] RIP: 0033:0x7fe88767cae9 [ 1742.189741][T21636] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1742.209371][T21636] RSP: 002b:00007fe8884680c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1742.217910][T21636] RAX: ffffffffffffffda RBX: 00007fe88779bf80 RCX: 00007fe88767cae9 [ 1742.225913][T21636] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 0000000020000000 [ 1742.233919][T21636] RBP: 00007fe888468120 R08: 0000000000000000 R09: 0000000000000000 [ 1742.241910][T21636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.249908][T21636] R13: 000000000000000b R14: 00007fe88779bf80 R15: 00007ffea59a4068 [ 1742.257915][T21636] [ 1742.261433][T21639] CPU: 0 PID: 21639 Comm: syz-executor.5 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1742.271900][T21639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1742.281990][T21639] Call Trace: [ 1742.285297][T21639] [ 1742.288261][T21639] dump_stack_lvl+0x1e7/0x2d0 [ 1742.293000][T21639] ? nf_tcp_handle_invalid+0x650/0x650 [ 1742.298510][T21639] ? panic+0x770/0x770 [ 1742.302637][T21639] ? __might_sleep+0xc0/0xc0 [ 1742.307284][T21639] should_fail_ex+0x3aa/0x4e0 [ 1742.312015][T21639] should_failslab+0x9/0x20 [ 1742.316558][T21639] slab_pre_alloc_hook+0x59/0x310 [ 1742.321640][T21639] kmem_cache_alloc+0x52/0x300 [ 1742.326450][T21639] ? alloc_empty_file+0x9e/0x1d0 [ 1742.331435][T21639] alloc_empty_file+0x9e/0x1d0 [ 1742.336240][T21639] path_openat+0xfa/0x3180 [ 1742.340715][T21639] ? verify_lock_unused+0x140/0x140 [ 1742.345969][T21639] ? kasan_set_track+0x4f/0x70 [ 1742.350769][T21639] ? __kasan_slab_alloc+0x66/0x70 [ 1742.355832][T21639] ? kmem_cache_alloc+0x123/0x300 [ 1742.360885][T21639] ? getname_flags+0xbc/0x4f0 [ 1742.365603][T21639] ? do_sys_openat2+0xd2/0x1d0 [ 1742.370412][T21639] ? __x64_sys_open+0x225/0x270 [ 1742.375303][T21639] ? do_syscall_64+0x41/0xc0 [ 1742.379949][T21639] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1742.386068][T21639] ? do_filp_open+0x490/0x490 [ 1742.390803][T21639] do_filp_open+0x234/0x490 [ 1742.395350][T21639] ? vfs_tmpfile+0x4b0/0x4b0 [ 1742.400000][T21639] ? _raw_spin_unlock+0x28/0x40 [ 1742.403515][ T4482] audit_log_start: 52276 callbacks suppressed [ 1742.403531][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1742.404867][T21639] ? alloc_fd+0x59c/0x640 [ 1742.410925][ T4482] audit: audit_lost=984473 audit_rate_limit=0 audit_backlog_limit=64 [ 1742.417420][T21639] do_sys_openat2+0x13e/0x1d0 [ 1742.421763][ T4482] audit: backlog limit exceeded [ 1742.429803][T21639] ? mutex_unlock+0x10/0x10 [ 1742.429832][T21639] ? do_sys_open+0x230/0x230 [ 1742.437072][T21643] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1742.439342][T21639] __x64_sys_open+0x225/0x270 [ 1742.444223][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1742.448399][T21639] ? do_sys_openat2+0x1d0/0x1d0 [ 1742.455253][T21643] audit: audit_lost=984474 audit_rate_limit=0 audit_backlog_limit=64 [ 1742.459549][T21639] ? syscall_enter_from_user_mode+0x32/0x230 [ 1742.466083][ T4482] audit: audit_lost=984475 audit_rate_limit=0 audit_backlog_limit=64 [ 1742.470865][T21639] ? lockdep_hardirqs_on+0x98/0x140 [ 1742.470896][T21639] ? syscall_enter_from_user_mode+0x32/0x230 [ 1742.470925][T21639] do_syscall_64+0x41/0xc0 [ 1742.470960][T21639] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1742.470995][T21639] RIP: 0033:0x7f323a67cae9 [ 1742.471035][T21639] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1742.471055][T21639] RSP: 002b:00007f323b3d00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1742.471081][T21639] RAX: ffffffffffffffda RBX: 00007f323a79bf80 RCX: 00007f323a67cae9 [ 1742.471100][T21639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1742.471116][T21639] RBP: 00007f323b3d0120 R08: 0000000000000000 R09: 0000000000000000 [ 1742.471132][T21639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1742.471147][T21639] R13: 000000000000000b R14: 00007f323a79bf80 R15: 00007fffa4b35338 [ 1742.471181][T21639] [ 1742.473195][T21641] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1742.480538][ T4482] audit: backlog limit exceeded [ 1742.513473][T21643] audit: backlog limit exceeded 01:36:43 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x6000) (async) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) lstat(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10e9e9078a7d8015) mount$9p_unix(&(0x7f0000000400)='./file3\x00', &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10, &(0x7f0000000580)={'trans=unix,', {[{@cache_none}, {@loose}, {@access_user}], [{@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '*@\xbf$@'}}, {@seclabel}]}}) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) (async) mount$nfs4(&(0x7f00000001c0)='+%(%*\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x200002, &(0x7f0000000280)={[{}, {}, {'*@\xbf$@'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x6, 0x6, 0x33, 0x31, 0x0, 0x32, 0x33], 0x2d, [0x37, 0x32, 0x63, 0x35], 0x2d, [0x37, 0x30, 0x31, 0x36], 0x2d, [0x66, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x32, 0x34, 0x36, 0x65, 0x39, 0x31, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@flag='async'}, {@smackfsroot={'smackfsroot', 0x3d, '//('}}]}) (async) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) 01:36:43 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(r0, &(0x7f0000000180)='./file0\x00', 0x4, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f0000000140)={0x8, 0xcc8deff8e361809f, 0x1a0000}, 0x20) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xf7820, &(0x7f0000000000)=ANY=[@ANYBLOB="7063723d303030303030303030389c44ad968d090dbaad3263bb"]) 01:36:43 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 4) 01:36:43 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r2, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x40000, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@uid_lt={'uid<', r4}}, {@flag='lazytime'}, {@smackfshat={'smackfshat', 0x3d, '*.#'}}]}}, 0x1, 0x0, &(0x7f0000002500)="e646822043b5ad584046cf6f28bfdc8c638d4b3458cd392bc1cec6692f508a9c0cde8f78f1f976877485962c819a2638a385218dbd80db00515d275ee3713a31842611355cb9f0fbe61ffd564f5f83213c00e4b7313a4c1f7f4c80ce") mount$9p_virtio(&(0x7f0000000040), &(0x7f0000002380)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000002180)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r0}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@fscache}, {@access_user}, {@nodevmap}], [{@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) 01:36:43 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x6000) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lstat(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x10e9e9078a7d8015) mount$9p_unix(&(0x7f0000000400)='./file3\x00', &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10, &(0x7f0000000580)={'trans=unix,', {[{@cache_none}, {@loose}, {@access_user}], [{@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '*@\xbf$@'}}, {@seclabel}]}}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$nfs4(&(0x7f00000001c0)='+%(%*\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x200002, &(0x7f0000000280)={[{}, {}, {'*@\xbf$@'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x6, 0x6, 0x33, 0x31, 0x0, 0x32, 0x33], 0x2d, [0x37, 0x32, 0x63, 0x35], 0x2d, [0x37, 0x30, 0x31, 0x36], 0x2d, [0x66, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x32, 0x34, 0x36, 0x65, 0x39, 0x31, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@flag='async'}, {@smackfsroot={'smackfsroot', 0x3d, '//('}}]}) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x6000) (async) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) lstat(&(0x7f00000003c0)='./file2\x00', &(0x7f0000000340)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x10e9e9078a7d8015) (async) mount$9p_unix(&(0x7f0000000400)='./file3\x00', &(0x7f0000000440)='./file1\x00', &(0x7f0000000480), 0x10, &(0x7f0000000580)={'trans=unix,', {[{@cache_none}, {@loose}, {@access_user}], [{@fowner_lt={'fowner<', r4}}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, r5}}, {@obj_role={'obj_role', 0x3d, '*@\xbf$@'}}, {@seclabel}]}}) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) (async) mount$nfs4(&(0x7f00000001c0)='+%(%*\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x200002, &(0x7f0000000280)={[{}, {}, {'*@\xbf$@'}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@fsmagic={'fsmagic', 0x3d, 0x100000001}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x6, 0x6, 0x33, 0x31, 0x0, 0x32, 0x33], 0x2d, [0x37, 0x32, 0x63, 0x35], 0x2d, [0x37, 0x30, 0x31, 0x36], 0x2d, [0x66, 0x62, 0x32, 0x62], 0x2d, [0x35, 0x32, 0x34, 0x36, 0x65, 0x39, 0x31, 0x64]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@flag='async'}, {@smackfsroot={'smackfsroot', 0x3d, '//('}}]}) (async) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) (async) 01:36:43 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 4) 01:36:43 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f2200"]) [ 1742.968450][T21656] FAULT_INJECTION: forcing a failure. [ 1742.968450][T21656] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.002219][T21655] 9pnet_virtio: no channels available for device syz [ 1743.033338][T21656] CPU: 1 PID: 21656 Comm: syz-executor.5 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1743.043802][T21656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1743.053890][T21656] Call Trace: [ 1743.057197][T21656] [ 1743.060154][T21656] dump_stack_lvl+0x1e7/0x2d0 [ 1743.064905][T21656] ? nf_tcp_handle_invalid+0x650/0x650 [ 1743.070412][T21656] ? panic+0x770/0x770 [ 1743.074526][T21656] ? __might_sleep+0xc0/0xc0 [ 1743.079167][T21656] should_fail_ex+0x3aa/0x4e0 [ 1743.083909][T21656] should_failslab+0x9/0x20 [ 1743.088453][T21656] slab_pre_alloc_hook+0x59/0x310 [ 1743.093531][T21656] kmem_cache_alloc+0x52/0x300 [ 1743.098335][T21656] ? security_file_alloc+0x28/0x120 [ 1743.103585][T21656] security_file_alloc+0x28/0x120 [ 1743.108660][T21656] init_file+0xa5/0x220 [ 1743.112859][T21656] alloc_empty_file+0xb8/0x1d0 [ 1743.117655][T21656] path_openat+0xfa/0x3180 [ 1743.122091][T21656] ? verify_lock_unused+0x140/0x140 [ 1743.127307][T21656] ? kasan_set_track+0x4f/0x70 [ 1743.132084][T21656] ? __kasan_slab_alloc+0x66/0x70 [ 1743.137127][T21656] ? kmem_cache_alloc+0x123/0x300 [ 1743.142247][T21656] ? getname_flags+0xbc/0x4f0 [ 1743.146939][T21656] ? do_sys_openat2+0xd2/0x1d0 [ 1743.151718][T21656] ? __x64_sys_open+0x225/0x270 [ 1743.156581][T21656] ? do_syscall_64+0x41/0xc0 [ 1743.161187][T21656] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1743.167279][T21656] ? do_filp_open+0x490/0x490 [ 1743.171979][T21656] do_filp_open+0x234/0x490 [ 1743.176499][T21656] ? vfs_tmpfile+0x4b0/0x4b0 [ 1743.181122][T21656] ? _raw_spin_unlock+0x28/0x40 [ 1743.185999][T21656] ? alloc_fd+0x59c/0x640 [ 1743.190363][T21656] do_sys_openat2+0x13e/0x1d0 [ 1743.195064][T21656] ? mutex_unlock+0x10/0x10 [ 1743.199584][T21656] ? do_sys_open+0x230/0x230 [ 1743.204203][T21656] __x64_sys_open+0x225/0x270 [ 1743.208906][T21656] ? do_sys_openat2+0x1d0/0x1d0 [ 1743.213775][T21656] ? syscall_enter_from_user_mode+0x32/0x230 [ 1743.219779][T21656] ? lockdep_hardirqs_on+0x98/0x140 [ 1743.224983][T21656] ? syscall_enter_from_user_mode+0x32/0x230 [ 1743.230978][T21656] do_syscall_64+0x41/0xc0 [ 1743.235428][T21656] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1743.241337][T21656] RIP: 0033:0x7f323a67cae9 [ 1743.245777][T21656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1743.265388][T21656] RSP: 002b:00007f323b3d00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1743.273811][T21656] RAX: ffffffffffffffda RBX: 00007f323a79bf80 RCX: 00007f323a67cae9 [ 1743.281790][T21656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1743.289772][T21656] RBP: 00007f323b3d0120 R08: 0000000000000000 R09: 0000000000000000 [ 1743.297760][T21656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.305740][T21656] R13: 000000000000000b R14: 00007f323a79bf80 R15: 00007fffa4b35338 [ 1743.313752][T21656] [ 1743.366892][T21665] FAULT_INJECTION: forcing a failure. [ 1743.366892][T21665] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.403065][T21665] CPU: 1 PID: 21665 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1743.413534][T21665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1743.423620][T21665] Call Trace: [ 1743.426922][T21665] [ 1743.429874][T21665] dump_stack_lvl+0x1e7/0x2d0 [ 1743.434609][T21665] ? nf_tcp_handle_invalid+0x650/0x650 [ 1743.440122][T21665] ? panic+0x770/0x770 [ 1743.444246][T21665] ? __might_sleep+0xc0/0xc0 [ 1743.448896][T21665] should_fail_ex+0x3aa/0x4e0 [ 1743.453631][T21665] should_failslab+0x9/0x20 [ 1743.458169][T21665] slab_pre_alloc_hook+0x59/0x310 [ 1743.463243][T21665] kmem_cache_alloc+0x52/0x300 [ 1743.468041][T21665] ? security_file_alloc+0x28/0x120 [ 1743.473287][T21665] security_file_alloc+0x28/0x120 [ 1743.478437][T21665] init_file+0xa5/0x220 [ 1743.482644][T21665] alloc_empty_file+0xb8/0x1d0 [ 1743.487452][T21665] path_openat+0xfa/0x3180 [ 1743.491921][T21665] ? verify_lock_unused+0x140/0x140 [ 1743.497193][T21665] ? kasan_set_track+0x4f/0x70 [ 1743.501991][T21665] ? __kasan_slab_alloc+0x66/0x70 [ 1743.507055][T21665] ? kmem_cache_alloc+0x123/0x300 [ 1743.512122][T21665] ? getname_flags+0xbc/0x4f0 01:36:43 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) fstat(r2, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_mount_image$fuse(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x40000, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@uid_lt={'uid<', r4}}, {@flag='lazytime'}, {@smackfshat={'smackfshat', 0x3d, '*.#'}}]}}, 0x1, 0x0, &(0x7f0000002500)="e646822043b5ad584046cf6f28bfdc8c638d4b3458cd392bc1cec6692f508a9c0cde8f78f1f976877485962c819a2638a385218dbd80db00515d275ee3713a31842611355cb9f0fbe61ffd564f5f83213c00e4b7313a4c1f7f4c80ce") mount$9p_virtio(&(0x7f0000000040), &(0x7f0000002380)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000002180)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r0}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@fscache}, {@access_user}, {@nodevmap}], [{@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) [ 1743.516869][T21665] ? do_sys_openat2+0xd2/0x1d0 [ 1743.521674][T21665] ? __x64_sys_open+0x225/0x270 [ 1743.526568][T21665] ? do_syscall_64+0x41/0xc0 [ 1743.531231][T21665] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1743.537359][T21665] ? do_filp_open+0x490/0x490 [ 1743.542103][T21665] do_filp_open+0x234/0x490 [ 1743.546652][T21665] ? vfs_tmpfile+0x4b0/0x4b0 [ 1743.551311][T21665] ? _raw_spin_unlock+0x28/0x40 [ 1743.556208][T21665] ? alloc_fd+0x59c/0x640 [ 1743.560585][T21665] do_sys_openat2+0x13e/0x1d0 01:36:44 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2}, 0x20) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FREEZING\x00', 0x9) 01:36:44 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 5) [ 1743.565310][T21665] ? mutex_unlock+0x10/0x10 [ 1743.569941][T21665] ? do_sys_open+0x230/0x230 [ 1743.574595][T21665] __x64_sys_open+0x225/0x270 [ 1743.579331][T21665] ? do_sys_openat2+0x1d0/0x1d0 [ 1743.584238][T21665] ? syscall_enter_from_user_mode+0x32/0x230 [ 1743.590289][T21665] ? lockdep_hardirqs_on+0x98/0x140 [ 1743.595527][T21665] ? syscall_enter_from_user_mode+0x32/0x230 [ 1743.601551][T21665] do_syscall_64+0x41/0xc0 [ 1743.606028][T21665] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1743.611974][T21665] RIP: 0033:0x7fe88767cae9 [ 1743.616422][T21665] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1743.636063][T21665] RSP: 002b:00007fe8884680c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1743.644515][T21665] RAX: ffffffffffffffda RBX: 00007fe88779bf80 RCX: 00007fe88767cae9 [ 1743.652522][T21665] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 0000000020000000 [ 1743.660528][T21665] RBP: 00007fe888468120 R08: 0000000000000000 R09: 0000000000000000 [ 1743.668534][T21665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.676537][T21665] R13: 000000000000000b R14: 00007fe88779bf80 R15: 00007ffea59a4068 [ 1743.684585][T21665] [ 1743.732642][T21670] 9pnet_virtio: no channels available for device syz 01:36:44 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f2200"]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f2200"]) (async) 01:36:44 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 64) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2}, 0x20) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FREEZING\x00', 0x9) 01:36:44 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(r2, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x40000, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@uid_lt={'uid<', r4}}, {@flag='lazytime'}, {@smackfshat={'smackfshat', 0x3d, '*.#'}}]}}, 0x1, 0x0, &(0x7f0000002500)="e646822043b5ad584046cf6f28bfdc8c638d4b3458cd392bc1cec6692f508a9c0cde8f78f1f976877485962c819a2638a385218dbd80db00515d275ee3713a31842611355cb9f0fbe61ffd564f5f83213c00e4b7313a4c1f7f4c80ce") mount$9p_virtio(&(0x7f0000000040), &(0x7f0000002380)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000002180)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r0}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@fscache}, {@access_user}, {@nodevmap}], [{@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020) (async) fstat(r2, &(0x7f0000002300)) (async) syz_mount_image$fuse(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x40000, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@appraise}, {@uid_lt={'uid<', r4}}, {@flag='lazytime'}, {@smackfshat={'smackfshat', 0x3d, '*.#'}}]}}, 0x1, 0x0, &(0x7f0000002500)="e646822043b5ad584046cf6f28bfdc8c638d4b3458cd392bc1cec6692f508a9c0cde8f78f1f976877485962c819a2638a385218dbd80db00515d275ee3713a31842611355cb9f0fbe61ffd564f5f83213c00e4b7313a4c1f7f4c80ce") (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000002380)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000002180)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r0}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@fscache}, {@access_user}, {@nodevmap}], [{@uid_gt={'uid>', r3}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) (async) 01:36:44 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 5) 01:36:44 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 6) 01:36:44 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 6) [ 1744.089460][T21682] 9pnet_virtio: no channels available for device syz [ 1744.152815][T21688] 9pnet_virtio: no channels available for device syz 01:36:44 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) renameat2(r0, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:44 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 7) 01:36:44 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 7) 01:36:44 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) renameat2(r0, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) 01:36:44 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f2200"]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f2200"]) (async) 01:36:44 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 8) 01:36:45 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 8) 01:36:45 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, r2}, 0x20) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FREEZING\x00', 0x9) 01:36:45 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 9) 01:36:45 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) renameat2(r0, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0xc) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:45 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 9) 01:36:45 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 10) 01:36:45 executing program 1: mknod(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:45 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 10) 01:36:45 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="b5ac9d5d00be356401005f019aadd5db86f20b09185e35fc0000ffff3000"]) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d80}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1010, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7669727469f68eebb3653874656e642c70726976706f72742c6163636573733d", @ANYRESDEC=r1, @ANYBLOB=',msize=0x0000000000000005,posixacl,smackfshat=!{}],fscontext=sysadm_u,dirsync,euid<', @ANYRESDEC=r2, @ANYBLOB="2cba29de5f55a81d61d4b04a0700bf4193c58c006e7f7d7143e11097917a4b6b00a79cc3c87b08a02de8cbd8c120"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mmap$qrtrtun(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x11, r3, 0x8) faccessat2(r3, &(0x7f0000000240)='./file0\x00', 0x10c, 0x1000) 01:36:45 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:45 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 11) 01:36:45 executing program 1: mknod(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:45 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 11) 01:36:46 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="b5ac9d5d00be356401005f019aadd5db86f20b09185e35fc0000ffff3000"]) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d80}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1010, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7669727469f68eebb3653874656e642c70726976706f72742c6163636573733d", @ANYRESDEC=r1, @ANYBLOB=',msize=0x0000000000000005,posixacl,smackfshat=!{}],fscontext=sysadm_u,dirsync,euid<', @ANYRESDEC=r2, @ANYBLOB="2cba29de5f55a81d61d4b04a0700bf4193c58c006e7f7d7143e11097917a4b6b00a79cc3c87b08a02de8cbd8c120"]) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mmap$qrtrtun(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x11, r3, 0x8) (async) faccessat2(r3, &(0x7f0000000240)='./file0\x00', 0x10c, 0x1000) 01:36:46 executing program 1: mknod(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:46 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 12) 01:36:46 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:46 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:46 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="b5ac9d5d00be356401005f019aadd5db86f20b09185e35fc0000ffff3000"]) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d80}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1010, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d7669727469f68eebb3653874656e642c70726976706f72742c6163636573733d", @ANYRESDEC=r1, @ANYBLOB=',msize=0x0000000000000005,posixacl,smackfshat=!{}],fscontext=sysadm_u,dirsync,euid<', @ANYRESDEC=r2, @ANYBLOB="2cba29de5f55a81d61d4b04a0700bf4193c58c006e7f7d7143e11097917a4b6b00a79cc3c87b08a02de8cbd8c120"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mmap$qrtrtun(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x11, r3, 0x8) (async) faccessat2(r3, &(0x7f0000000240)='./file0\x00', 0x10c, 0x1000) 01:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000b320bc567d7f13f785878ff00f79ac4a46e", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, r2, 0x1000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 01:36:46 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 13) 01:36:46 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x3, 0x0) 01:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000b320bc567d7f13f785878ff00f79ac4a46e", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, r2, 0x1000) (async) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 01:36:46 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x18, 0x0) 01:36:46 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 14) 01:36:46 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/118, 0x76) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c5c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004c7c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf8, "5ecfc340c34afe"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004d7c0)={{0x0, 0x8, 0x4, 0x7fff, 0x9, 0xffffffffffffff65, 0xf22, 0xf8c1, 0x5b6, 0x3, 0x0, 0x73, 0x1f, 0x4, 0x100}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004da40)={{0x0, 0x10000, 0x9, 0x9, 0x96c7, 0x1000, 0x6, 0x9, 0x7, 0x6, 0x4, 0x3, 0x10000, 0x1, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004db00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dd00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004df00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e300)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "e34166d57bba41"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004f700)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "c7f253bcdee0a0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000050b00)={{0x0, 0x8, 0x200, 0x2, 0x9, 0x9, 0x38, 0x7, 0x0, 0x9, 0x4, 0x2, 0x10000, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000050bc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "320c527f1a0435"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051bc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "aafcf337e82de4"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000052bc0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052dc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "92693cf4906a5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000053dc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053fc0)={{0x0, 0x400, 0x3ff, 0x5, 0x800, 0x5f, 0x1, 0x7ff, 0xfff, 0xff, 0x6, 0x1, 0x6, 0x3, 0x7fffffff}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054080)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "44468121a67d37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055080)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4}, {r5, r6}, {}, {r7}, {0x0, r8}, {0x0, r9}, {0x0, r10}, {}, {}, {0x0, r11}, {}, {r12}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {}, {0x0, r16}, {}, {}, {0x0, r17}, {r18}, {0x0, r19}, {0x0, r20}, {}, {r21, r22}, {0x0, r23}, {r24, r25}], 0x40, "f8d2f781d73718"}) 01:36:46 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x145002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:46 executing program 1: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffffffffffff, 0x1}}, 0x18) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000b320bc567d7f13f785878ff00f79ac4a46e", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, r2, 0x1000) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)) 01:36:46 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x40080, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:46 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x300, 0x0) 01:36:46 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 15) 01:36:46 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/118, 0x76) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c5c0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004c7c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf8, "5ecfc340c34afe"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004d7c0)={{0x0, 0x8, 0x4, 0x7fff, 0x9, 0xffffffffffffff65, 0xf22, 0xf8c1, 0x5b6, 0x3, 0x0, 0x73, 0x1f, 0x4, 0x100}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004da40)={{0x0, 0x10000, 0x9, 0x9, 0x96c7, 0x1000, 0x6, 0x9, 0x7, 0x6, 0x4, 0x3, 0x10000, 0x1, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004db00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dd00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004df00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e100)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e300)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "e34166d57bba41"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f300)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f500)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004f700)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "c7f253bcdee0a0"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000050b00)={{0x0, 0x8, 0x200, 0x2, 0x9, 0x9, 0x38, 0x7, 0x0, 0x9, 0x4, 0x2, 0x10000, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000050bc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "320c527f1a0435"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051bc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "aafcf337e82de4"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000052bc0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052dc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "92693cf4906a5f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000053dc0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053fc0)={{0x0, 0x400, 0x3ff, 0x5, 0x800, 0x5f, 0x1, 0x7ff, 0xfff, 0xff, 0x6, 0x1, 0x6, 0x3, 0x7fffffff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054080)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "44468121a67d37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055080)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4}, {r5, r6}, {}, {r7}, {0x0, r8}, {0x0, r9}, {0x0, r10}, {}, {}, {0x0, r11}, {}, {r12}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {}, {0x0, r16}, {}, {}, {0x0, r17}, {r18}, {0x0, r19}, {0x0, r20}, {}, {r21, r22}, {0x0, r23}, {r24, r25}], 0x40, "f8d2f781d73718"}) 01:36:46 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x145002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:47 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100408, &(0x7f0000000100)={'trans=xen,', {[{@uname={'uname', 0x3d, '\xe4'}}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_mmap}, {@aname}, {@access_user}, {@access_any}, {@dfltgid}], [{@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'e!\x1c]/&/\':'}}]}}) [ 1746.605886][T21787] FAULT_INJECTION: forcing a failure. [ 1746.605886][T21787] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.651897][T21787] CPU: 1 PID: 21787 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1746.662367][T21787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1746.672465][T21787] Call Trace: [ 1746.675784][T21787] [ 1746.678751][T21787] dump_stack_lvl+0x1e7/0x2d0 [ 1746.683491][T21787] ? nf_tcp_handle_invalid+0x650/0x650 [ 1746.689006][T21787] ? panic+0x770/0x770 [ 1746.693126][T21787] ? __might_sleep+0xc0/0xc0 [ 1746.697759][T21787] ? copy_from_kernel_nofault_allowed+0x79/0xe0 [ 1746.704063][T21787] should_fail_ex+0x3aa/0x4e0 [ 1746.708797][T21787] should_failslab+0x9/0x20 [ 1746.713346][T21787] slab_pre_alloc_hook+0x59/0x310 [ 1746.718415][T21787] ? prepend_path+0x2f/0xbe0 [ 1746.723058][T21787] ? tomoyo_encode+0x26f/0x530 [ 1746.727868][T21787] __kmem_cache_alloc_node+0x4b/0x270 [ 1746.733286][T21787] ? d_absolute_path+0x1c6/0x300 [ 1746.738366][T21787] ? tomoyo_encode+0x26f/0x530 [ 1746.743184][T21787] __kmalloc+0xa8/0x230 [ 1746.747408][T21787] tomoyo_encode+0x26f/0x530 [ 1746.752076][T21787] tomoyo_realpath_from_path+0x598/0x5e0 [ 1746.757776][T21787] tomoyo_check_open_permission+0x255/0x500 [ 1746.763790][T21787] ? tomoyo_check_open_permission+0x204/0x500 [ 1746.769909][T21787] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1746.776073][T21787] ? __mnt_want_write+0x68/0x2a0 [ 1746.781052][T21787] ? tomoyo_file_open+0xea/0x170 [ 1746.786038][T21787] security_file_open+0x63/0xa0 [ 1746.790940][T21787] do_dentry_open+0x325/0x1430 [ 1746.795765][T21787] ? __asan_memcpy+0x40/0x70 [ 1746.800416][T21787] path_openat+0x27bb/0x3180 [ 1746.805072][T21787] ? getname_flags+0xbc/0x4f0 [ 1746.809807][T21787] ? do_filp_open+0x490/0x490 [ 1746.814561][T21787] do_filp_open+0x234/0x490 [ 1746.819115][T21787] ? vfs_tmpfile+0x4b0/0x4b0 [ 1746.823772][T21787] ? _raw_spin_unlock+0x28/0x40 [ 1746.828687][T21787] ? alloc_fd+0x59c/0x640 [ 1746.833083][T21787] do_sys_openat2+0x13e/0x1d0 [ 1746.837811][T21787] ? mutex_unlock+0x10/0x10 [ 1746.842369][T21787] ? do_sys_open+0x230/0x230 [ 1746.847028][T21787] __x64_sys_open+0x225/0x270 [ 1746.851761][T21787] ? do_sys_openat2+0x1d0/0x1d0 [ 1746.856669][T21787] ? syscall_enter_from_user_mode+0x32/0x230 [ 1746.862869][T21787] ? lockdep_hardirqs_on+0x98/0x140 [ 1746.868115][T21787] ? syscall_enter_from_user_mode+0x32/0x230 [ 1746.874149][T21787] do_syscall_64+0x41/0xc0 [ 1746.878629][T21787] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1746.884579][T21787] RIP: 0033:0x7fe88767cae9 [ 1746.889031][T21787] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1746.908847][T21787] RSP: 002b:00007fe8884680c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1746.917302][T21787] RAX: ffffffffffffffda RBX: 00007fe88779bf80 RCX: 00007fe88767cae9 [ 1746.925336][T21787] RDX: 0000000000000000 RSI: 0000000000000142 RDI: 0000000020000000 [ 1746.933342][T21787] RBP: 00007fe888468120 R08: 0000000000000000 R09: 0000000000000000 [ 1746.941348][T21787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1746.949361][T21787] R13: 000000000000000b R14: 00007fe88779bf80 R15: 00007ffea59a4068 [ 1746.957390][T21787] 01:36:47 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100408, &(0x7f0000000100)={'trans=xen,', {[{@uname={'uname', 0x3d, '\xe4'}}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_mmap}, {@aname}, {@access_user}, {@access_any}, {@dfltgid}], [{@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'e!\x1c]/&/\':'}}]}}) 01:36:47 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x145002, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1, 0xee00}}, './file0\x00'}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:47 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x1800, 0x0) 01:36:47 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) readlinkat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/118, 0x76) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004c5c0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004c7c0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf8, "5ecfc340c34afe"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004d7c0)={{0x0, 0x8, 0x4, 0x7fff, 0x9, 0xffffffffffffff65, 0xf22, 0xf8c1, 0x5b6, 0x3, 0x0, 0x73, 0x1f, 0x4, 0x100}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d840)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004da40)={{0x0, 0x10000, 0x9, 0x9, 0x96c7, 0x1000, 0x6, 0x9, 0x7, 0x6, 0x4, 0x3, 0x10000, 0x1, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004db00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004dd00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000004df00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004e100)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e300)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "e34166d57bba41"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f300)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f500)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004f700)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "c7f253bcdee0a0"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000050700)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000050900)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000050b00)={{0x0, 0x8, 0x200, 0x2, 0x9, 0x9, 0x38, 0x7, 0x0, 0x9, 0x4, 0x2, 0x10000, 0x9}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000050bc0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "320c527f1a0435"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000051bc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "aafcf337e82de4"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000052bc0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000052dc0)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x20, "92693cf4906a5f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000053dc0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000053fc0)={{0x0, 0x400, 0x3ff, 0x5, 0x800, 0x5f, 0x1, 0x7ff, 0xfff, 0xff, 0x6, 0x1, 0x6, 0x3, 0x7fffffff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054080)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "44468121a67d37"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000055080)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r4}, {r5, r6}, {}, {r7}, {0x0, r8}, {0x0, r9}, {0x0, r10}, {}, {}, {0x0, r11}, {}, {r12}, {}, {0x0, r13}, {}, {0x0, r14}, {r15}, {}, {0x0, r16}, {}, {}, {0x0, r17}, {r18}, {0x0, r19}, {0x0, r20}, {}, {r21, r22}, {0x0, r23}, {r24, r25}], 0x40, "f8d2f781d73718"}) [ 1747.119183][T21787] ERROR: Out of memory at tomoyo_realpath_from_path. 01:36:47 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x191000, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}], 0xa, "84c03bb559df6f000288df26197ad119a813c5a91949ebfe84116d167d0cbb36af8ade50df7c3ee9c970462c6a24fdb28c2c60f6233bf224c6a640115b41b1d135b863c6c23c8e020ef16b23fb9fe686ee45acfafbe81278e4c19d3e993eded40cf84679dad0d01ff5ce4cae4b69b36844eff02649df5bca6bf5b9c908a5f7517f82049d50cfb83466e1d73b56c80fffd627f5e672e4de70c94c9020fb1c62d6bb35ba66aafb5fca2570af8352b66ea90bbbed8ab518b899d0"}, 0xc5) 01:36:47 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (fail_nth: 16) 01:36:47 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x100408, &(0x7f0000000100)={'trans=xen,', {[{@uname={'uname', 0x3d, '\xe4'}}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@cache_mmap}, {@aname}, {@access_user}, {@access_any}, {@dfltgid}], [{@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', r0}}, {@dont_appraise}, {@subj_role={'subj_role', 0x3d, 'e!\x1c]/&/\':'}}]}}) 01:36:47 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x3f00, 0x0) 01:36:47 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="ff0702000000d9d60b2466696c653100", @ANYRES8=r0]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x950006, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x5}}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000200)=@sg0, 0xee00, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r2, &(0x7f0000000240)='./file0\x00', 0x800, 0x40, &(0x7f00000003c0)) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)={0x29, 0x4, 0x0, {0x3, 0x549, 0x1, 0x0, [0x0]}}, 0x29) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000104000018000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB='./file1\x00']) 01:36:47 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) read$rfkill(r1, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1747.413177][ T28] kauditd_printk_skb: 34817 callbacks suppressed [ 1747.413195][ T28] audit: type=1400 audit(1697852207.834:2854028): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15005 comm="syz-executor.0" name="syzkaller.wxJNvH" dev="sda1" ino=1944 [ 1747.417181][ T5045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1747.420315][T21817] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1747.443265][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1747.448759][T21819] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1747.469862][ T4482] audit: audit_lost=991102 audit_rate_limit=0 audit_backlog_limit=64 [ 1747.478893][ T4482] audit: backlog limit exceeded [ 1747.483951][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1747.485935][ T28] audit: type=1400 audit(1697852207.834:2854029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15005 comm="syz-executor.0" name="syzkaller.wxJNvH" dev="sda1" ino=1944 01:36:47 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x10040, 0x0) [ 1747.494375][T21822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1747.528758][T21819] FAULT_INJECTION: forcing a failure. [ 1747.528758][T21819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1747.550231][T21819] CPU: 1 PID: 21819 Comm: syz-executor.4 Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1747.560682][T21819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1747.570807][T21819] Call Trace: [ 1747.574125][T21819] [ 1747.577089][T21819] dump_stack_lvl+0x1e7/0x2d0 [ 1747.581913][T21819] ? nf_tcp_handle_invalid+0x650/0x650 [ 1747.587440][T21819] ? panic+0x770/0x770 [ 1747.591577][T21819] ? snprintf+0xda/0x120 [ 1747.595903][T21819] should_fail_ex+0x3aa/0x4e0 [ 1747.600644][T21819] _copy_to_user+0x2f/0xa0 [ 1747.605112][T21819] simple_read_from_buffer+0xca/0x150 [ 1747.610544][T21819] proc_fail_nth_read+0x1e9/0x250 [ 1747.615629][T21819] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1747.621324][T21819] ? fsnotify_perm+0x420/0x5a0 [ 1747.626144][T21819] ? proc_fault_inject_write+0x3c0/0x3c0 [ 1747.631837][T21819] vfs_read+0x279/0xb00 [ 1747.636054][T21819] ? __fdget_pos+0x2b0/0x340 [ 1747.640779][T21819] ? kernel_read+0x1f0/0x1f0 [ 1747.645427][T21819] ? __fget_files+0x28/0x4a0 [ 1747.650058][T21819] ? __fget_files+0x435/0x4a0 [ 1747.654802][T21819] ? __fdget_pos+0x2b0/0x340 [ 1747.659430][T21819] ? ksys_read+0x7b/0x2c0 [ 1747.663833][T21819] ksys_read+0x1a0/0x2c0 [ 1747.668133][T21819] ? print_irqtrace_events+0x220/0x220 [ 1747.673645][T21819] ? vfs_write+0xaf0/0xaf0 [ 1747.678121][T21819] ? syscall_enter_from_user_mode+0x32/0x230 [ 1747.684155][T21819] ? lockdep_hardirqs_on+0x98/0x140 [ 1747.689404][T21819] ? syscall_enter_from_user_mode+0x32/0x230 [ 1747.695432][T21819] do_syscall_64+0x41/0xc0 [ 1747.699900][T21819] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1747.705863][T21819] RIP: 0033:0x7fe88767b78c 01:36:48 executing program 1: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4040, &(0x7f0000000240)=ANY=[@ANYBLOB="747261df9bfb9b697274696f2c6e6f6465766d61702c6d73697a653d3078303030303030303030303030303030332c63616368653d6e6f6e652c6673636f6e746578743d73746166665f752c7375626a5f757365723da50000002c646566636f6e746578743d756e636f6e66696e65645f752c00"]) open(&(0x7f0000000000)='./file0\x00', 0x10101, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 01:36:48 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) read$rfkill(r1, &(0x7f0000000000), 0x8) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:48 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x191000, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}], 0xa, "84c03bb559df6f000288df26197ad119a813c5a91949ebfe84116d167d0cbb36af8ade50df7c3ee9c970462c6a24fdb28c2c60f6233bf224c6a640115b41b1d135b863c6c23c8e020ef16b23fb9fe686ee45acfafbe81278e4c19d3e993eded40cf84679dad0d01ff5ce4cae4b69b36844eff02649df5bca6bf5b9c908a5f7517f82049d50cfb83466e1d73b56c80fffd627f5e672e4de70c94c9020fb1c62d6bb35ba66aafb5fca2570af8352b66ea90bbbed8ab518b899d0"}, 0xc5) [ 1747.710312][T21819] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1747.729952][T21819] RSP: 002b:00007fe8884680c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1747.738413][T21819] RAX: ffffffffffffffda RBX: 00007fe88779bf80 RCX: 00007fe88767b78c [ 1747.746421][T21819] RDX: 000000000000000f RSI: 00007fe888468130 RDI: 0000000000000003 [ 1747.754430][T21819] RBP: 00007fe888468120 R08: 0000000000000000 R09: 0000000000000000 01:36:48 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x3000000, 0x0) 01:36:48 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="ff0702000000d9d60b2466696c653100", @ANYRES8=r0]) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x950006, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x5}}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}) (async) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000200)=@sg0, 0xee00, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x800, 0x40, &(0x7f00000003c0)) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)={0x29, 0x4, 0x0, {0x3, 0x549, 0x1, 0x0, [0x0]}}, 0x29) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000104000018000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB='./file1\x00']) [ 1747.762438][T21819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1747.770567][T21819] R13: 000000000000000b R14: 00007fe88779bf80 R15: 00007ffea59a4068 [ 1747.778592][T21819] 01:36:48 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x191000, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}], 0xa, "84c03bb559df6f000288df26197ad119a813c5a91949ebfe84116d167d0cbb36af8ade50df7c3ee9c970462c6a24fdb28c2c60f6233bf224c6a640115b41b1d135b863c6c23c8e020ef16b23fb9fe686ee45acfafbe81278e4c19d3e993eded40cf84679dad0d01ff5ce4cae4b69b36844eff02649df5bca6bf5b9c908a5f7517f82049d50cfb83466e1d73b56c80fffd627f5e672e4de70c94c9020fb1c62d6bb35ba66aafb5fca2570af8352b66ea90bbbed8ab518b899d0"}, 0xc5) 01:36:48 executing program 1: openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="3078376666666666666666666666666666663a3078303030303030303030303030303030393a3078666666666666666666666666666666663a3078303030303030303030303030303230303a3078303030303030303030303030303030383a3078303030303030303030303030303030393a3078303030303030303030303030303030363a3078303030303030303030303030383030302f30303030303030303030303736353637373836322000b16ac2095add8238f01cdc812026c64f41e6b8c6f39a9da8363b9bae45d177a71577b25e1085af46acd8e582861982d484aa4e1cacdb608e5a78af6a4483ac7758f921f194215a2db7a19df316029d"], 0xae) (async) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4040, &(0x7f0000000240)=ANY=[@ANYBLOB="747261df9bfb9b697274696f2c6e6f6465766d61702c6d73697a653d3078303030303030303030303030303030332c63616368653d6e6f6e652c6673636f6e746578743d73746166665f752c7375626a5f757365723da50000002c646566636f6e746578743d756e636f6e66696e65645f752c00"]) open(&(0x7f0000000000)='./file0\x00', 0x10101, 0x0) chdir(&(0x7f0000000040)='./file0\x00') 01:36:48 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYBLOB="ff0702000000d9d60b2466696c653100", @ANYRES8=r0]) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x950006, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x5}}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}]}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000200)=@sg0, 0xee00, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r2, &(0x7f0000000240)='./file0\x00', 0x800, 0x40, &(0x7f00000003c0)) (async, rerun: 64) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000280)={0x29, 0x4, 0x0, {0x3, 0x549, 0x1, 0x0, [0x0]}}, 0x29) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000104000018000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB='./file1\x00']) 01:36:48 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) read$rfkill(r1, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:48 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x18000000, 0x0) 01:36:48 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:48 executing program 1: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4040, &(0x7f0000000240)=ANY=[@ANYBLOB="747261df9bfb9b697274696f2c6e6f6465766d61702c6d73697a653d3078303030303030303030303030303030332c63616368653d6e6f6e652c6673636f6e746578743d73746166665f752c7375626a5f757365723da50000002c646566636f6e746578743d756e636f6e66696e65645f752c00"]) open(&(0x7f0000000000)='./file0\x00', 0x10101, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xae) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4040, &(0x7f0000000240)=ANY=[@ANYBLOB="747261df9bfb9b697274696f2c6e6f6465766d61702c6d73697a653d3078303030303030303030303030303030332c63616368653d6e6f6e652c6673636f6e746578743d73746166665f752c7375626a5f757365723da50000002c646566636f6e746578743d756e636f6e66696e65645f752c00"]) (async) open(&(0x7f0000000000)='./file0\x00', 0x10101, 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) 01:36:48 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8004, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:48 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:48 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x3f000000, 0x0) 01:36:48 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x3) 01:36:48 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:48 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x8) 01:36:48 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x40000100, 0x0) 01:36:48 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, &(0x7f0000000040)={0x4, 0x100001}, 0x20) 01:36:48 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8004, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:49 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x10) 01:36:49 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, &(0x7f0000000040)={0x4, 0x100001}, 0x20) (rerun: 32) 01:36:49 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x1000000000000, 0x0) 01:36:49 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async, rerun: 32) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:49 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x18) 01:36:49 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x300000000000000, 0x0) 01:36:49 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, &(0x7f0000000040)={0x4, 0x100001}, 0x20) 01:36:49 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8004, &(0x7f0000000340)={[], [{@flag='ro'}]}) (rerun: 64) 01:36:49 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x91) 01:36:49 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x5100) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='N\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffffb) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) 01:36:49 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000000)=@nullb, 0xee00, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:49 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x1800000000000000, 0x0) 01:36:49 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x300) 01:36:49 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x3f00000000000000, 0x0) 01:36:50 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x5100) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='N\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffffb) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) 01:36:50 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000000)=@nullb, 0xee00, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:50 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x1800) 01:36:50 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x4000010000000000, 0x0) 01:36:50 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000000)=@nullb, 0xee00, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000000)=@nullb, 0xee00, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) [ 1749.798350][T21925] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 01:36:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002a80), 0x0, 0x0, &(0x7f0000002c00), 0x0, 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) faccessat2(r0, &(0x7f0000000000)='./file0/file0\x00', 0x81, 0x200) 01:36:50 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x5100) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='N\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffffb) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x5100) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='N\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0xfffffffb) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, r1, 0x0) (async) 01:36:50 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x2000) 01:36:50 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10, 0xffffc253) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10424a0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368657461673d2e0aedc1fc3033fac799cf80ee89d22c76657273696f6e3d3970323030302e752c667363616368652c63616368653d6d6d61702c66736e616d653d272a5d402c7063723d30303030303030303030303030303030303032372c736d61636b6673666c6f6f723d2ec62c636f6e626578743d8c6e636f6e66696e65645f752c612c736d61636b66"]) r0 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000003c0)='./file0/file0\x00', 0x220020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@flag='mand'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000000400)="8118ddc624") faccessat2(r0, &(0x7f0000000440)='./file0/file0\x00', 0xa, 0x100) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000004c0)='io.pressure\x00', 0x2, 0x0) mknodat$null(r1, &(0x7f0000000480)='./file0\x00', 0x8000, 0x103) 01:36:50 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0xffffffff00000000, 0x0) 01:36:50 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x3) 01:36:50 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x3f00) 01:36:50 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10, 0xffffc253) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10424a0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368657461673d2e0aedc1fc3033fac799cf80ee89d22c76657273696f6e3d3970323030302e752c667363616368652c63616368653d6d6d61702c66736e616d653d272a5d402c7063723d30303030303030303030303030303030303032372c736d61636b6673666c6f6f723d2ec62c636f6e626578743d8c6e636f6e66696e65645f752c612c736d61636b66"]) r0 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000003c0)='./file0/file0\x00', 0x220020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@flag='mand'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000000400)="8118ddc624") faccessat2(r0, &(0x7f0000000440)='./file0/file0\x00', 0xa, 0x100) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000004c0)='io.pressure\x00', 0x2, 0x0) mknodat$null(r1, &(0x7f0000000480)='./file0\x00', 0x8000, 0x103) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10, 0xffffc253) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10424a0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368657461673d2e0aedc1fc3033fac799cf80ee89d22c76657273696f6e3d3970323030302e752c667363616368652c63616368653d6d6d61702c66736e616d653d272a5d402c7063723d30303030303030303030303030303030303032372c736d61636b6673666c6f6f723d2ec62c636f6e626578743d8c6e636f6e66696e65645f752c612c736d61636b66"]) (async) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000003c0)='./file0/file0\x00', 0x220020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@flag='mand'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000000400)="8118ddc624") (async) faccessat2(r0, &(0x7f0000000440)='./file0/file0\x00', 0xa, 0x100) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000004c0)='io.pressure\x00', 0x2, 0x0) (async) mknodat$null(r1, &(0x7f0000000480)='./file0\x00', 0x8000, 0x103) (async) 01:36:50 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x710, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:50 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x18) 01:36:51 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10, 0xffffc253) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10424a0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368657461673d2e0aedc1fc3033fac799cf80ee89d22c76657273696f6e3d3970323030302e752c667363616368652c63616368653d6d6d61702c66736e616d653d272a5d402c7063723d30303030303030303030303030303030303032372c736d61636b6673666c6f6f723d2ec62c636f6e626578743d8c6e636f6e66696e65645f752c612c736d61636b66"]) r0 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000003c0)='./file0/file0\x00', 0x220020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@flag='mand'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000000400)="8118ddc624") faccessat2(r0, &(0x7f0000000440)='./file0/file0\x00', 0xa, 0x100) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000004c0)='io.pressure\x00', 0x2, 0x0) mknodat$null(r1, &(0x7f0000000480)='./file0\x00', 0x8000, 0x103) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x10, 0xffffc253) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10424a0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d76697274696f2c63616368657461673d2e0aedc1fc3033fac799cf80ee89d22c76657273696f6e3d3970323030302e752c667363616368652c63616368653d6d6d61702c66736e616d653d272a5d402c7063723d30303030303030303030303030303030303032372c736d61636b6673666c6f6f723d2ec62c636f6e626578743d8c6e636f6e66696e65645f752c612c736d61636b66"]) (async) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f00000003c0)='./file0/file0\x00', 0x220020, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1e00}}], [{@obj_role}, {@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@flag='mand'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit}]}}, 0x0, 0x0, &(0x7f0000000400)="8118ddc624") (async) faccessat2(r0, &(0x7f0000000440)='./file0/file0\x00', 0xa, 0x100) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000004c0)='io.pressure\x00', 0x2, 0x0) (async) mknodat$null(r1, &(0x7f0000000480)='./file0\x00', 0x8000, 0x103) (async) 01:36:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002a80), 0x0, 0x0, &(0x7f0000002c00), 0x0, 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) faccessat2(r0, &(0x7f0000000000)='./file0/file0\x00', 0x81, 0x200) 01:36:51 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x710, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:51 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x9100) 01:36:51 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x300) 01:36:51 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x710, 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x710, 0x4) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:51 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x100000) 01:36:51 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x48) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002a80), 0x0, 0x0, &(0x7f0000002c00), 0x0, 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) faccessat2(r0, &(0x7f0000000000)='./file0/file0\x00', 0x81, 0x200) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002a80), 0x0, 0x0, &(0x7f0000002c00), 0x0, 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) faccessat2(r0, &(0x7f0000000000)='./file0/file0\x00', 0x81, 0x200) (async) 01:36:51 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1800) 01:36:51 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:51 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x3000000) 01:36:51 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x48) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:51 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x3f00) 01:36:51 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:51 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x8000000) 01:36:51 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200018, &(0x7f0000000340)) 01:36:51 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x48) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10040) 01:36:52 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0xa0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x18000000) 01:36:52 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x3000000) 01:36:52 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000002600)={0x16, 0x98, 0xfa00, {&(0x7f0000002380), 0x3, r2, 0x30, 0x1, @ib={0x1b, 0xffff, 0x1, {"18fd01634d6f101ce70c76b2229e7c3e"}, 0xfff, 0x8000000000000000, 0x1ff}}}, 0xa0) write$smackfs_load(0xffffffffffffffff, &(0x7f0000000040)={'/dev/fuse\x00', 0x20, '&#$]\'@!|.:', 0x20, 'xtl'}, 0x1a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002400)={"2bfceca086fcfc92f82a152b0b920834", r0, 0x0, {0x3}, {0xfffffffffffffffc, 0x1}, 0x3, [0x0, 0x7ff, 0xffffffffffffff5b, 0x2, 0x400, 0x2, 0x9b, 0x5, 0x3, 0x400, 0x81, 0x6, 0x0, 0x7, 0x1, 0x100000001]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) openat$userio(0xffffffffffffff9c, &(0x7f0000002340), 0x80100, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000002300)='2\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002500)=ANY=[@ANYBLOB="010009000000000018000000c75bc497a3467f00c128c1a95b6008c74c534ea372a6e636cdbeb04cfa631a24aa725890ef51fe6aaa05aaf8db49731038c60322f8ac7c87dd1a1ce7b031bb49152bf243596c3f32db48eecf2350f3beec1258f8fa3334b9f5e01e134cb57c75fdfd3e92362d1783b6e2d0830d74ebe3ccd2bcaf9b9fc0c75de84bda4bb09751ecf8fec91940e44614bac6d69765a7172ddfc79fa0671aee9c9d6a0ab8545decbcd9b92f9b67f549c4bf918ecf0100000000000000a574570ba0a454ba4882a2b40012b38f9a00"/225, @ANYRES32=r4, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0xa0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200018, &(0x7f0000000340)) 01:36:52 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x20000000) 01:36:52 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x18000000) 01:36:52 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000002600)={0x16, 0x98, 0xfa00, {&(0x7f0000002380), 0x3, r2, 0x30, 0x1, @ib={0x1b, 0xffff, 0x1, {"18fd01634d6f101ce70c76b2229e7c3e"}, 0xfff, 0x8000000000000000, 0x1ff}}}, 0xa0) write$smackfs_load(0xffffffffffffffff, &(0x7f0000000040)={'/dev/fuse\x00', 0x20, '&#$]\'@!|.:', 0x20, 'xtl'}, 0x1a) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002400)={"2bfceca086fcfc92f82a152b0b920834", r0, 0x0, {0x3}, {0xfffffffffffffffc, 0x1}, 0x3, [0x0, 0x7ff, 0xffffffffffffff5b, 0x2, 0x400, 0x2, 0x9b, 0x5, 0x3, 0x400, 0x81, 0x6, 0x0, 0x7, 0x1, 0x100000001]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) openat$userio(0xffffffffffffff9c, &(0x7f0000002340), 0x80100, 0x0) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000002300)='2\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002500)=ANY=[@ANYBLOB="010009000000000018000000c75bc497a3467f00c128c1a95b6008c74c534ea372a6e636cdbeb04cfa631a24aa725890ef51fe6aaa05aaf8db49731038c60322f8ac7c87dd1a1ce7b031bb49152bf243596c3f32db48eecf2350f3beec1258f8fa3334b9f5e01e134cb57c75fdfd3e92362d1783b6e2d0830d74ebe3ccd2bcaf9b9fc0c75de84bda4bb09751ecf8fec91940e44614bac6d69765a7172ddfc79fa0671aee9c9d6a0ab8545decbcd9b92f9b67f549c4bf918ecf0100000000000000a574570ba0a454ba4882a2b40012b38f9a00"/225, @ANYRES32=r4, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000002600)={0x16, 0x98, 0xfa00, {&(0x7f0000002380), 0x3, r2, 0x30, 0x1, @ib={0x1b, 0xffff, 0x1, {"18fd01634d6f101ce70c76b2229e7c3e"}, 0xfff, 0x8000000000000000, 0x1ff}}}, 0xa0) (async) write$smackfs_load(0xffffffffffffffff, &(0x7f0000000040)={'/dev/fuse\x00', 0x20, '&#$]\'@!|.:', 0x20, 'xtl'}, 0x1a) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002400)={"2bfceca086fcfc92f82a152b0b920834", r0, 0x0, {0x3}, {0xfffffffffffffffc, 0x1}, 0x3, [0x0, 0x7ff, 0xffffffffffffff5b, 0x2, 0x400, 0x2, 0x9b, 0x5, 0x3, 0x400, 0x81, 0x6, 0x0, 0x7, 0x1, 0x100000001]}) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000002340), 0x80100, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$yama_ptrace_scope(r3, &(0x7f0000002300)='2\x00', 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002500)=ANY=[@ANYBLOB="010009000000000018000000c75bc497a3467f00c128c1a95b6008c74c534ea372a6e636cdbeb04cfa631a24aa725890ef51fe6aaa05aaf8db49731038c60322f8ac7c87dd1a1ce7b031bb49152bf243596c3f32db48eecf2350f3beec1258f8fa3334b9f5e01e134cb57c75fdfd3e92362d1783b6e2d0830d74ebe3ccd2bcaf9b9fc0c75de84bda4bb09751ecf8fec91940e44614bac6d69765a7172ddfc79fa0671aee9c9d6a0ab8545decbcd9b92f9b67f549c4bf918ecf0100000000000000a574570ba0a454ba4882a2b40012b38f9a00"/225, @ANYRES32=r4, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:52 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0xa0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0xa0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:52 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x3f000000) 01:36:52 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x3f000000) 01:36:52 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x2) chdir(&(0x7f0000000040)='./file0\x00') lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200018, &(0x7f0000000340)) [ 1752.423256][ T28] kauditd_printk_skb: 33500 callbacks suppressed [ 1752.423273][ T28] audit: type=1400 audit(1697852212.844:2872540): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=15005 comm="syz-executor.0" path="/root/syzkaller-testdir178425648/syzkaller.wxJNvH/452/cgroup.cpu" dev="sda1" ino=1948 [ 1752.455695][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1752.462245][ T4482] audit: audit_lost=996128 audit_rate_limit=0 audit_backlog_limit=64 01:36:52 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048900)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "4179b75e11c07c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049900)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "192a6fd7cf0f26"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004a900)={{0x0, 0xa, 0xffffffffffffff14, 0x2, 0x8, 0xfffffffffffffffc, 0x5, 0x1, 0x2, 0x0, 0x5, 0x7, 0x9, 0xdc4d}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a9c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "09a048fa262500"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004bbc0)={{0x0, 0x9, 0xffffffffffffffff, 0x1, 0xdba, 0x3, 0xffff, 0xeb, 0x5, 0x4c5, 0x6, 0x101, 0x6c, 0x7, 0x7f}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bc80)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x36, "a90b9af216a0e5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cc80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004ce80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "a014377f0b02ad"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "057f4663509d0e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ee80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004f480)={{0x0, 0x0, 0xcd5, 0xc7c8, 0x2, 0x1f, 0x1, 0x4f, 0x2, 0x0, 0x3000, 0x8000000000000001, 0xffffffffffffffff, 0x1}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f500)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4e, "d20e542f20a31a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050500)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8d076868475756"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051900)={{0x0, 0xffffffffffffff27, 0x100000000, 0x80, 0x7, 0x4, 0x101, 0x0, 0xfffff800, 0x80, 0x9c5, 0xfffffffffffffffa, 0x0, 0x5, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000519c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051dc0)={{0x0, 0x0, 0x464d, 0x33e9, 0x6e, 0x6, 0x594, 0x3, 0x4, 0x1, 0x81, 0x7, 0x9, 0x401, 0x16b}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051e80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052080)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "88c20a12f82ef7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "dea28271d8dc62"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {}, {r6}, {}, {0x0, r7}, {0x0, r8}, {r9}, {0x0, r10}, {r11, r12}, {}, {0x0, r13}, {}, {r14}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}, {}, {}, {0x0, r18}, {}, {r19}, {r20}, {0x0, r21}, {r22}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r24, r25}, {}, {}, {}, {0x0, r26}, {0x0, r27}], 0x2, "a13d9225eb4a57"}) [ 1752.470495][ T4471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1752.470515][ T4471] audit: audit_lost=996129 audit_rate_limit=0 audit_backlog_limit=64 [ 1752.470533][ T4471] audit: backlog limit exceeded [ 1752.470614][ T4471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1752.483072][ T5024] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1752.485421][ T4471] audit: audit_lost=996130 audit_rate_limit=0 audit_backlog_limit=64 [ 1752.490105][ T5024] audit: audit_lost=996131 audit_rate_limit=0 audit_backlog_limit=64 01:36:52 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000002600)={0x16, 0x98, 0xfa00, {&(0x7f0000002380), 0x3, r2, 0x30, 0x1, @ib={0x1b, 0xffff, 0x1, {"18fd01634d6f101ce70c76b2229e7c3e"}, 0xfff, 0x8000000000000000, 0x1ff}}}, 0xa0) (async) write$smackfs_load(0xffffffffffffffff, &(0x7f0000000040)={'/dev/fuse\x00', 0x20, '&#$]\'@!|.:', 0x20, 'xtl'}, 0x1a) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002400)={"2bfceca086fcfc92f82a152b0b920834", r0, 0x0, {0x3}, {0xfffffffffffffffc, 0x1}, 0x3, [0x0, 0x7ff, 0xffffffffffffff5b, 0x2, 0x400, 0x2, 0x9b, 0x5, 0x3, 0x400, 0x81, 0x6, 0x0, 0x7, 0x1, 0x100000001]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000002340), 0x80100, 0x0) (async) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$yama_ptrace_scope(r3, &(0x7f0000002300)='2\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002500)=ANY=[@ANYBLOB="010009000000000018000000c75bc497a3467f00c128c1a95b6008c74c534ea372a6e636cdbeb04cfa631a24aa725890ef51fe6aaa05aaf8db49731038c60322f8ac7c87dd1a1ce7b031bb49152bf243596c3f32db48eecf2350f3beec1258f8fa3334b9f5e01e134cb57c75fdfd3e92362d1783b6e2d0830d74ebe3ccd2bcaf9b9fc0c75de84bda4bb09751ecf8fec91940e44614bac6d69765a7172ddfc79fa0671aee9c9d6a0ab8545decbcd9b92f9b67f549c4bf918ecf0100000000000000a574570ba0a454ba4882a2b40012b38f9a00"/225, @ANYRES32=r4, @ANYBLOB='?\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:52 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x91000000) 01:36:52 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x40000100) 01:36:53 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x2) chdir(&(0x7f0000000040)='./file0\x00') (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:53 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0xfbffffff) 01:36:53 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1000000000000) 01:36:53 executing program 3: mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x400, 0x3) open(&(0x7f0000000000)='./file0\x00', 0x620240, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)) 01:36:53 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048900)={0x800, [], 0x0, "4179b75e11c07c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048900)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "4179b75e11c07c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049900)={0x8, [], 0x1, "192a6fd7cf0f26"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049900)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "192a6fd7cf0f26"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004a900)={{0x0, 0xa, 0xffffffffffffff14, 0x2, 0x8, 0xfffffffffffffffc, 0x5, 0x1, 0x2, 0x0, 0x5, 0x7, 0x9, 0xdc4d}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a9c0)={0x6, [], 0x6, "09a048fa262500"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a9c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "09a048fa262500"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004bbc0)={{0x0, 0x9, 0xffffffffffffffff, 0x1, 0xdba, 0x3, 0xffff, 0xeb, 0x5, 0x4c5, 0x6, 0x101, 0x6c, 0x7, 0x7f}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004bbc0)={{0x0, 0x9, 0xffffffffffffffff, 0x1, 0xdba, 0x3, 0xffff, 0xeb, 0x5, 0x4c5, 0x6, 0x101, 0x6c, 0x7, 0x7f}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bc80)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x36, "a90b9af216a0e5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cc80)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cc80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004ce80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "a014377f0b02ad"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6, [], 0x6, "057f4663509d0e"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "057f4663509d0e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ee80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004f480)={{0x0, 0x0, 0xcd5, 0xc7c8, 0x2, 0x1f, 0x1, 0x4f, 0x2, 0x0, 0x3000, 0x8000000000000001, 0xffffffffffffffff, 0x1}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004f480)={{0x0, 0x0, 0xcd5, 0xc7c8, 0x2, 0x1f, 0x1, 0x4f, 0x2, 0x0, 0x3000, 0x8000000000000001, 0xffffffffffffffff, 0x1}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f500)={0x100000000, [], 0x4e, "d20e542f20a31a"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f500)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4e, "d20e542f20a31a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050500)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8d076868475756"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051900)={{0x0, 0xffffffffffffff27, 0x100000000, 0x80, 0x7, 0x4, 0x101, 0x0, 0xfffff800, 0x80, 0x9c5, 0xfffffffffffffffa, 0x0, 0x5, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000519c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051dc0)={{0x0, 0x0, 0x464d, 0x33e9, 0x6e, 0x6, 0x594, 0x3, 0x4, 0x1, 0x81, 0x7, 0x9, 0x401, 0x16b}, 0x20, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051dc0)={{0x0, 0x0, 0x464d, 0x33e9, 0x6e, 0x6, 0x594, 0x3, 0x4, 0x1, 0x81, 0x7, 0x9, 0x401, 0x16b}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051e80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052080)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "88c20a12f82ef7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "dea28271d8dc62"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054080)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {}, {r6}, {}, {0x0, r7}, {0x0, r8}, {r9}, {0x0, r10}, {r11, r12}, {}, {0x0, r13}, {}, {r14}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}, {}, {}, {0x0, r18}, {}, {r19}, {r20}, {0x0, r21}, {r22}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r24, r25}, {}, {}, {}, {0x0, r26}, {0x0, r27}], 0x2, "a13d9225eb4a57"}) 01:36:53 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x2) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:53 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0xfffffffb) 01:36:53 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x1) mount$9p_unix(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x62, &(0x7f0000000180)={'trans=unix,', {[{@version_L}], [{@measure}]}}) 01:36:53 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x300000000000000) 01:36:53 executing program 3: mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x400, 0x3) (async) open(&(0x7f0000000000)='./file0\x00', 0x620240, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)) 01:36:53 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x1000000000000) 01:36:53 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x10, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x208042, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 01:36:53 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x1800000000000000) 01:36:53 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000048900)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "4179b75e11c07c"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000049900)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "192a6fd7cf0f26"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004a900)={{0x0, 0xa, 0xffffffffffffff14, 0x2, 0x8, 0xfffffffffffffffc, 0x5, 0x1, 0x2, 0x0, 0x5, 0x7, 0x9, 0xdc4d}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a9c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "09a048fa262500"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004b9c0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004bbc0)={{0x0, 0x9, 0xffffffffffffffff, 0x1, 0xdba, 0x3, 0xffff, 0xeb, 0x5, 0x4c5, 0x6, 0x101, 0x6c, 0x7, 0x7f}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004bc80)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x36, "a90b9af216a0e5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004cc80)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004ce80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "a014377f0b02ad"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004de80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "057f4663509d0e"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ee80)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f080)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004f280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000004f480)={{0x0, 0x0, 0xcd5, 0xc7c8, 0x2, 0x1f, 0x1, 0x4f, 0x2, 0x0, 0x3000, 0x8000000000000001, 0xffffffffffffffff, 0x1}, 0x10, [0x0, 0x0]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f500)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4e, "d20e542f20a31a"}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050500)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "8d076868475756"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051500)={0x0, ""/256, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051700)={0x0, ""/256, 0x0, 0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051900)={{0x0, 0xffffffffffffff27, 0x100000000, 0x80, 0x7, 0x4, 0x101, 0x0, 0xfffff800, 0x80, 0x9c5, 0xfffffffffffffffa, 0x0, 0x5, 0x5}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000519c0)={0x0}) (rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000051dc0)={{0x0, 0x0, 0x464d, 0x33e9, 0x6e, 0x6, 0x594, 0x3, 0x4, 0x1, 0x81, 0x7, 0x9, 0x401, 0x16b}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000051e80)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052080)={0x81, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "88c20a12f82ef7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000053080)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "dea28271d8dc62"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054080)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054480)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2}, {r3}, {}, {0x0, r4}, {r5}, {}, {}, {r6}, {}, {0x0, r7}, {0x0, r8}, {r9}, {0x0, r10}, {r11, r12}, {}, {0x0, r13}, {}, {r14}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}, {}, {}, {0x0, r18}, {}, {r19}, {r20}, {0x0, r21}, {r22}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {r24, r25}, {}, {}, {}, {0x0, r26}, {0x0, r27}], 0x2, "a13d9225eb4a57"}) 01:36:53 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x10000000000000) 01:36:53 executing program 3: mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x400, 0x3) (async) open(&(0x7f0000000000)='./file0\x00', 0x620240, 0x0) (async) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)) 01:36:53 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x1) mount$9p_unix(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x62, &(0x7f0000000180)={'trans=unix,', {[{@version_L}], [{@measure}]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x1) (async) mount$9p_unix(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x62, &(0x7f0000000180)={'trans=unix,', {[{@version_L}], [{@measure}]}}) (async) 01:36:53 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x10, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x208042, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 01:36:53 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x3f00000000000000) 01:36:54 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x300000000000000) 01:36:54 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x44801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "f34205", "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"}}, 0x110) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x3bd}}, 0x10) 01:36:54 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x8000000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8140, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x4000010000000000) 01:36:54 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x1) mount$9p_unix(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x62, &(0x7f0000000180)={'trans=unix,', {[{@version_L}], [{@measure}]}}) 01:36:54 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x10, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x208042, 0x0) (rerun: 32) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) (rerun: 64) 01:36:54 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffff00000000) 01:36:54 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x800000000000000) 01:36:54 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x44801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "f34205", "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"}}, 0x110) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x3bd}}, 0x10) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x44801, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "f34205", "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"}}, 0x110) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x3bd}}, 0x10) (async) 01:36:54 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x8000000) (async) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8140, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0/file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_lt={'uid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x63, 0x33, 0x37, 0x62, 0x35, 0x35], 0x2d, [0x37, 0x65, 0x30, 0x31], 0x2d, [0x64, 0x64, 0x61, 0x30], 0x2d, [0x31, 0x33, 0x35, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x34, 0x34, 0x37, 0x3, 0x66]}}}, {@smackfsfloor}, {@uid_lt={'uid<', 0xee00}}, {@appraise_type}, {@context={'context', 0x3d, 'system_u'}}]}}, 0x0, 0x0, &(0x7f0000000280)="08d2ca4e186f2e4b5eaafddf5c54d781660129cc459132cc3a9ea015deac223b1e17b66ba0d613349307acca2d8c79090536e0ca4eadad266c75bf765db7e148f7533ecbd40eef2dc63eefb4c20f47028e8f5296e6a989ee34b358e004bb7790f38a67f6bd9b4030d0dcf1e4b9b74962006eb3fab7bbd231cd62fbf21e4d8b801756d95bd49b5f7f2cf30417dbbe64d4e35b8441c8323cc00e6bf96b16d3415d75cc1857cc2ff199c5ac4485576685906155428455da12692761b1c6048ff343fa655cb8beeb03a4eefa53e03a7a1f6beca32519366d0d8e8b8ce632ccb03736958170a2c4ef2e5b18e9836e220e5a0fe05bdb68128dc6ae8609c3ccba81e40ffc5090673fa7ab146771872a1de0f1a4e4eb733b3cdcf339954acab47a5a29423f2402f4633b0cdd840fce67a2918bb48baeb2584d27bca4fd338d2ef5ffbbd0c99028d653dbeabf0e58d6f76a37aa101bd31ff3bac00aef9ec136a77f1f319891a7b055c105cad05d8086ad2102693b90ac8f09fbf669250fc146cc195e70512c54342dd794dfedb1dfb9d7ead1b554710477315169ccfa171f815f276d295745e85a724923aed08bf610f5fdd803c142a873970e31326c69f7b2a7c97990c49ccd112f37eb08f5595a91889c528aeed075de96850cf2c75325b819bcb4f27cd1788e87e5de6996e12a386e043db6889066a835d2fbbc7d3bbb774d1e3429d92e18ea4c50a900f95973ea6df0786481106395e0b60de3c66d353ee180f899cb80c8a25d1ad18148654a5aefce6a63611b9c186d08df6ae3e9bdc390b7259c3886a33d418b58662f6bcea6490ffbf24a06e32eedd9e1b6e095891618232ac8b2e3e5223862e90b68999ba092fc56a09899bb73f5e7f3d1056ffe956559433d8752471830e00e2afd2dbb8c7358936775880c1f82da84ba4b627056168ecb19ada8b0d04b3f4196923906d4446e6f6fb8e6987f401cd312e284e4d614b17469f74baa9e31334f6103495bdb6b5f12db913350c7c9eb0a1dd558544cafd627d2a245aad1b331e58c1fbb573c93d72088d6d755ba57b9219e7701da954f41469a2c54a9bd7564c39581297f41ceb3a3c48a2e709d3f276312285a0b3aeffde3bc5fe76c1b53ccb9b1d2c0c116795c9f63866ea6e2d9ca275f0dd44c7c279f06a1f9e28c3fdc5c373b82cc6c2ce59e12347d94620c4fcf5106ed392e9b60cbf40bef9a964a6e9484f61e521cb434f815cfac9e56215f145622a1b3634f1bed2698dfbc9cafd731f4d156153d6538f6e5f7c936059f65579cb32830bae9827214633106b1e3725dc443c9a33968c14e38dc3580c7a38b0c493034536fae5363a007015f97ed4046e6a370620a91f8171bb0f9a4dbb399279c7471c58f27f5cad06407e5677d9e5dcaf8ceb4112b37818c7c44a6bcdb231cfddfa33e3db763000178cdbe31c8037a67f22a6e11d093284507ddd4c740cca69730ff78dc270b484468605740a0d52b2f596c83ec94d64188d28dd5c502a160be8105f779dbd32d4e1b34fffd2dc8b734bd41370dba8164558e325f8bc111d819b5773e43b94a19c7eb63957eae5cf8d04a6061239b8bd930751b523077007b784b645391fe342c91e04f7540b43b30969e87eb0d531e865188b47cd409b8b79cd7ba13d8cd1d5d931e7e6c73472abdbdcb1ef7d704f97e645f6914349ebc5414a5d952ba518ceb16ebc01ba300067418b2cacff401aba90438a0bcd38cd53418ec126ef870eb3b55a20340bc0b94a85299a12c520280883246ec1404e9582218165a3f0b28ba039b3924f477081b64b28f19a9128126d370ba5e653e72e4d68d4a760e44268208913d538773f8731b089b795a5448861d23d59bb01f098be04904b2c0cf9c6afe132a1837a6783486ecde3c5c340cb2f4b525f38ab955e6ea55abbf1ccd5cfcc8ff81e2db1d0026d56d9adff780126dedde5219d433bed5c00bf8a56b9c13996f968f5c876e8443ba2d4b0b256a0a5ad490174ff5571a7f6390a373d36835f224284a6b40bbb166eff31ea4273fbe6c2f9210b2e078c2167cc4ab044c9237cfed8953fa005ea333414a32f8f607ee4aa2bac389173c02155d96b9652e1f10efd142e4f53d6caabec9056e0150d43067d0331ed908df2162305b7ac95c16d47594ec634c9df877471d66e1b994a8cc76f3e0d0baec9802146595e6e3885865e5c6da721af5537fb8cb7afdad81a03d3e9db88be12e3b0c20108f79600882491257812bbb022dbd6755d818b9c3ec071df67a57d1d413c99431668f1c7914980db46c83e42552bdd04edc8019d1ec618541cfdc56a91ce9a6bd056c13bb1e8b5ab2553eaa597408ea0419777b92ff725521422364218a10e4023b324384003d38a9efc5164d2220d1b321d1da808dea9a48b25aaaf602cc8a7fa46a5de8e18ad8341af6a6318fd5bbe6c7250d28e81e11ff63a5a62a775f1eac8cae868af43b1bdc820a38cacb7833abfc1ea573813d97405af660ca4724615aa1c082da1ef18efaeeb28b4d4f0adf20fc7a72a0601052daf45577813cb5cb5bc23f3474e634b88ddea0ec5dec9e772d175fb6d78a030fe9ff7b2eed8228b3d0b78d6ca6f28b789340bccb9d39d0b572aa31a6b20b03d2449d6e40c0eb86e0806c3357c5eca70bb8309f4c48dd2e2e47c180392ffb3a6b7e6ecbe8229736945d99528e5ef76f69177e2264c9a29004af597fc76703a5a87e88f0eec963ffe83309cb384b2e6a71684b5b5a0b9abe97d0e0778f7791b331edcfe34fd0a2090a275ee0eea8dd89b299c99436c7f628a2f71a8461ddfa4e77b68734cad9ef6495c7de6d91a93c818ea78fc02d14aebb194cf798d3f0944f10abf3d2ff90e44adcc34e6ff20ea97362bf8ac5371b7cad13547945e7c2988b21210ba19304106587a4cc01c605d830fedc2dee56d6246ff6158ebb353b6331d7735068b7286002fc0ee77d8dd6e879d551cdf4b99a9741f1b93eb9dd41d6595cacb119c4abbf9c0010ed738dbd878098bea8e90b383732a3466126c70092629aeb88ea8be54bf293c32da4089195e10046f088c13ca14f010e5b47d42f9c360c22a260519fd6c2a09429b98849b116fc2aaa43f31c86cb55c04bc38f25534b61ebc01d2f6dd52ef0fd60fdf1a30f9f689d70b308a28e7258e6a778b1db0a63cb8175203e53b19ce6a8642d3f80685500cdf4318d3ee1d969af3e5aff911c91a3d1caf4e2b72592be547e3a1dd42ecdf900710a1f22b0b6fdfd9529f07ff843bb141a34bb39e7062db8bfd62dc84c70bf3c17b1d222d9cb4b4ec9d929af24ea306281d419cd36431b83c414452a777e0d597d893383a194adf82d8cf10e147fba2f482dbf00bef99b9279c193fc3365544b5e3d6714b69fbdfc8b5f14eeced95b8c14206b47ed028e6586969aae354af0798c74487883c31fab23e47c9394a4cb00c11f7543645420b99cc8edc6bb14c94cde6efd8b6f8b354ac5d06c934d845b9998ea03dea2664bc1f3a3887bcc5e03918a0d650d9b0475b17e9a2deddd7b1dd66859d59fd822d0f13936d7a94a737a4aa4d9e9e0e3b54c3f272c95432511d489bee3faf13ec90d737b77a52dfb8dfaef2c25ff7c76bc639fcc0db2ae885fbac8e3c1dbc22cbadd5cde83d1ce09aadc85a951fcb1618afe473c20b42817c4274670e18ac1876f932abc5a826531b391bf22aee9c789508f131c9805da79872a012c7d1918cd7e57fb681f9b9b81763e45f480493baed24d14d861832b8754865fedf14177793e4389fe5165ed1fcdb5897a6af68fb7e4181c21bbd2fedf0cbe41e1449da87a80d10628b0bb640d69f699f57bba0d84560e5f727909c32017c17b65a31abd27709c22be528ef314e5430383a4233b1145adade8bba31ade66498c7b16f2b1ff2fc7a355862bc2cedec10e5f299676efda312b390d6574df56961daaf679bfa3844a75f8af76475a223c7eccb10081bc948a59360a9cf8795c79bb0c5c93d5ab66bac49cbdb1c24ef0fc2b7beb63693484a185d5905edc32d52c52a5e7a4ad4e483263757ca11c7e18911b78fd206b9bf01fd184bbeb9ef7d5845cb305660e5a47a40d4e396c33a772879c0c4c9fcacecb7ced24599e94de3d8a597aafb93142db8a0ceb0529cf9c46909e11bf131b43c58c0d62270189d74f2f365d93382dd3d268dc3067e64a7dec663cca15c73f3c2779fe931abfcfe3c7993fc7b47b780620e9872005753c2874631fb8cdb7d05ce46d2782d3415ccc6f715723eeec103e9fab3344826ad865cee0d600c48f76741fdaeb88d11ac06799de832dd56dfacb1093cdf426d42088a8a2758ba881e94ad8cf0f456443c3ccb5bcd568d090a2e808567efcbf8668567cee04c872692ed92117385ec9aa8f3d6cc76585508b3c8b0576dabbad39a84fac1fd12c8ec888639a87598f0bc0c62e52a150ff72ee5f35a8639a492ae9e72cf1c4b181b381dccabee6711b00e8f492623b6b5de70ecb84ac285a71f628a83fbbc234aa76601bbb4123c72d9f2e4093c38d007f9b819a8ad6f04968e58d323c690e52e5465bc27d62e5847436425fd1a8ee92b9e32d95bd9423e11d2fb54146220d8dbf10f0294b5435c1e9a331fc91afd45010f944310fa06e6b79e7c0602a82f8ecc21a7ea3f556bbcdef168149e5240fc11a9e6c09f64625039b4335272a5e32d3fee7e3f251d96f0646fde9f43849240818a566a859e7fb8d61d35858a80fb83f798b0ba1e895b63e39a0d964cfa0086a1abb23695da1c46dbf8a8c796dfe7a278f1bc77b17bd30afe8202119ffe6c9cac7a54e6c0cad0f800905531ae96ad06e02fff4abf4c0019aa4e5226344a5acd10e14882c438483832fcdc236e58f8eb656c15043502631fdeacfd25a7d6b0d681b4f24ae63eda49943cebcac5925df05fea0071d8ba9a8740453848407c1c5c2574b54b609227033bee169ead25944fade59adfb603982483bbcc3947ed07b873c79413305d56120c71273ce43214de610241487f69baed0937a7198af59b9567ffa4751765d33ec34d560fe364b60dad7e1dda9316f44b91d5a1319efc39df9887960e9123a61900cbc3a12699c69dcd5d076c38dc70e7d61a33024c71966dc2e669c4a4194c8fac1a4793f33af77092ea9319888378c4d3ed94bf3134c81a8fcfc16928bab8a24d5bd41aac2a15b5573498f9944dbbc55e54cc81fd0a540383e92a2dcb34a3efe592b4e79df32a974437843624d5bbce14dda5c00a2acf51307e2fedc48c701ecab247822079d3d39f7e3d78848eb4734a40395ebfefa76de78ed003dc5ef44f19eee3bb075cc734776d9281f74f0938b34a6d6fb4c0ec4a2e1ed2532a88894f33e6364024f400426fe9c94fc74299d8ec0f5530792d022cd8291bf9f5ee6e416b621adad01beac9e9cdbbcc5b35ce2a822773532a624dd19bd04779b3e545162e8d39b593bfd515d0a78a3ac3e48fb4a343eb9cbc23eec7ad61a018563fb32876421035aa7c00529f6ac0a91a1fd61b81143ee5e63437191a89bb328deae3b2891740176524520808fe0ef676cfbb1d122bfb17af4e6a974fbd9f2e8803f691e293da4702e89e5bac44a348a716989789e338f1d1ae89dc42f66e1a10312c87b6cd953cafe1dd3842fce5d15997976e90dcc3e7708d16705df454fe335586b5039f71e7e56cf6878de6c98f4fec789e9d6c1517f56229d815cff056ca3f773c258f7ddbb8bdbc41b6432307558d9867ec311bee26e5da92075224bf8ea19c2e05d7da2ac2d72d6216e8aae") 01:36:54 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x2000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x1800000000000000) 01:36:54 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x8000000) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x8140, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x44801, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x44801, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x2b, "f34205", "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"}}, 0x110) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x3bd}}, 0x10) 01:36:54 executing program 0: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1710a1, &(0x7f0000000180)={'trans=unix,', {[{@uname={'uname', 0x3d, 'bpf\x00'}}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@euid_eq}, {@euid_gt}, {@appraise_type}]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) [ 1754.268932][T22158] fuse: Bad value for 'fd' 01:36:54 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0/file0\x00'}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_lt={'uid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x63, 0x33, 0x37, 0x62, 0x35, 0x35], 0x2d, [0x37, 0x65, 0x30, 0x31], 0x2d, [0x64, 0x64, 0x61, 0x30], 0x2d, [0x31, 0x33, 0x35, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x34, 0x34, 0x37, 0x3, 0x66]}}}, {@smackfsfloor}, {@uid_lt={'uid<', 0xee00}}, {@appraise_type}, {@context={'context', 0x3d, 'system_u'}}]}}, 0x0, 0x0, &(0x7f0000000280)="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") 01:36:54 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x2000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:54 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x2000000000000000) 01:36:54 executing program 2: write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000000)=@l1={{0x3, 0x3a, 0x9, 0x3a, 0xb7, 0x3a, 0x80000000, 0x3a, 0x4, 0x3a, 0x81, 0x3a, 0x8, 0x3a, 0x8}, 0x20, '-}//'}, 0x9d) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:55 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x2000) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:55 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:55 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x3f00000000000000) [ 1754.661712][T22178] fuse: Bad value for 'fd' 01:36:55 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0/file0\x00'}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}], [{@uid_lt={'uid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x66, 0x63, 0x33, 0x37, 0x62, 0x35, 0x35], 0x2d, [0x37, 0x65, 0x30, 0x31], 0x2d, [0x64, 0x64, 0x61, 0x30], 0x2d, [0x31, 0x33, 0x35, 0x63], 0x2d, [0x61, 0x39, 0x39, 0x34, 0x34, 0x37, 0x3, 0x66]}}}, {@smackfsfloor}, {@uid_lt={'uid<', 0xee00}}, {@appraise_type}, {@context={'context', 0x3d, 'system_u'}}]}}, 0x0, 0x0, &(0x7f0000000280)="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") 01:36:55 executing program 0: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1710a1, &(0x7f0000000180)={'trans=unix,', {[{@uname={'uname', 0x3d, 'bpf\x00'}}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@euid_eq}, {@euid_gt}, {@appraise_type}]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1710a1, &(0x7f0000000180)={'trans=unix,', {[{@uname={'uname', 0x3d, 'bpf\x00'}}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@euid_eq}, {@euid_gt}, {@appraise_type}]}}) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) 01:36:55 executing program 2: write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000000)=@l1={{0x3, 0x3a, 0x9, 0x3a, 0xb7, 0x3a, 0x80000000, 0x3a, 0x4, 0x3a, 0x81, 0x3a, 0x8, 0x3a, 0x8}, 0x20, '-}//'}, 0x9d) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:55 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x4) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:55 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x9100000000000000) 01:36:55 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) [ 1754.898689][T22195] fuse: Bad value for 'fd' 01:36:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0'}], 0x3) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:55 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) 01:36:55 executing program 2: write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000000)=@l1={{0x3, 0x3a, 0x9, 0x3a, 0xb7, 0x3a, 0x80000000, 0x3a, 0x4, 0x3a, 0x81, 0x3a, 0x8, 0x3a, 0x8}, 0x20, '-}//'}, 0x9d) (async) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000000)=@l1={{0x3, 0x3a, 0x9, 0x3a, 0xb7, 0x3a, 0x80000000, 0x3a, 0x4, 0x3a, 0x81, 0x3a, 0x8, 0x3a, 0x8}, 0x20, '-}//'}, 0x9d) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:55 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:36:55 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0xfbffffff00000000) 01:36:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0'}], 0x3) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:55 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) (async) 01:36:55 executing program 0: mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1710a1, &(0x7f0000000180)={'trans=unix,', {[{@uname={'uname', 0x3d, 'bpf\x00'}}, {@fscache}], [{@obj_type={'obj_type', 0x3d, 'bpf\x00'}}, {@euid_eq}, {@euid_gt}, {@appraise_type}]}}) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:36:55 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) (async) 01:36:55 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0x0}}, './file0\x00'}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) lchown(&(0x7f00000001c0)='./file0\x00', r6, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) 01:36:55 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r0) 01:36:55 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0'}], 0x3) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:55 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x100) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, r1) 01:36:56 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async, rerun: 64) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0x0}}, './file0\x00'}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) (async, rerun: 32) lchown(&(0x7f00000001c0)='./file0\x00', r6, r2) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) (rerun: 64) 01:36:56 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000) (async) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r0) (async) 01:36:56 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:56 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000180)={0x79, 0x70}, 0x20) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000300)={'[\'', 0x20, '/dev/ubi_ctrl\x00', 0x20, 'wxabl', 0x20, 'tbl'}, 0x1c) statx(r1, &(0x7f0000000380)='./file1\x00', 0x5100, 0x7ff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x812c04, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',privport,fscache,cache=none,cache=loose,cache=loose,euid=', @ANYRESDEC=r3, @ANYBLOB=',obj_user=,mask=MAY_READ,\x00']) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200a00, 0x0) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x10, 0xa127) 01:36:56 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:56 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x400, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x100000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffff4bb}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x30000000}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000540)="07a03d7800deb491b5ac7045dc0b59fdfb4265f4d16c07cf6a3405302e28d6c3218f1ecc9841b990159dae30f173a519df9c597fbbdf7640da112202fd3c8de44986f72f8b4d28ab7d5298fb0d374a6bbd1658ad0d4bf506cc2a429bfe7560adefb1787595d97570c0ed5e453751567e67b7a0cb5a4956806c9330deb96ed50dad5c2d32b220385ac589d8f4390a921326d72c4720d8972fb834c9e7f89a53491c2f31e3752040b032a5e96688bfa39a4a9f75e80a4a77c503b18eb801") 01:36:56 executing program 1: newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r0) 01:36:56 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01, 0x0}}, './file0\x00'}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r4 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) lchown(&(0x7f00000001c0)='./file0\x00', r6, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) (async) lchown(&(0x7f00000001c0)='./file0\x00', r6, r2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r5}}, './file0\x00'}) (async) 01:36:56 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:36:56 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000180)={0x79, 0x70}, 0x20) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) write$smackfs_change_rule(r0, &(0x7f0000000300)={'[\'', 0x20, '/dev/ubi_ctrl\x00', 0x20, 'wxabl', 0x20, 'tbl'}, 0x1c) (async, rerun: 32) statx(r1, &(0x7f0000000380)='./file1\x00', 0x5100, 0x7ff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x812c04, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',privport,fscache,cache=none,cache=loose,cache=loose,euid=', @ANYRESDEC=r3, @ANYBLOB=',obj_user=,mask=MAY_READ,\x00']) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200a00, 0x0) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x10, 0xa127) 01:36:56 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) mount$nfs4(&(0x7f00000004c0)='{-,[*', &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x3000, &(0x7f0000000580)={[{'.-\x02[-]]'}, {':\xf1-]'}, {}, {'user_id'}, {']'}, {'MMAP_CHECK'}, {'}%+'}, {}, {'%,+'}, {'fd'}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', 0xee00}}, {@uid_lt={'uid<', 0xee01}}]}}, 0x0, 0x0, &(0x7f0000000440)="e0edecfac46bec4572d46ec490ac9bcea5627ecf81017264096b6d126dfbfcd105b28b8ff43370d416017da66668ef78dbd7eb25e0382de53c64ecc80593ee3a00c6fd") mount$nfs4(&(0x7f0000000000)='-\'\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240008, &(0x7f0000000100)={[{}, {'/&}\xdc&'}, {}, {'.)\\'}, {}, {'}%+'}], [{@flag='nomand'}, {@obj_type={'obj_type', 0x3d, '(,)%}'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '>:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x64, 0x32, 0x37, 0x31, 0x33, 0x64], 0x2d, [0x65, 0x31, 0x39, 0x33], 0x2d, [0x7c459fa7958eea6f, 0x64, 0x38, 0x30], 0x2d, [0x36, 0x50, 0x65, 0x39], 0x2d, [0x64, 0x31, 0x33, 0x66, 0x30, 0x32, 0x66, 0x36]}}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@dont_appraise}]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r0, &(0x7f0000000640)='./file0\x00', 0x4000, 0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000600)='./file0\x00', r5, r3, 0x1000) 01:36:56 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0/file0\x00'}) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:36:56 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67c000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d22}, 0xffffffffffffffff, 0xffff8000}}, 0x48) [ 1756.288605][T22284] fuse: Bad value for 'fd' 01:36:56 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:56 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) (async) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x400, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x100000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffff4bb}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x30000000}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000540)="07a03d7800deb491b5ac7045dc0b59fdfb4265f4d16c07cf6a3405302e28d6c3218f1ecc9841b990159dae30f173a519df9c597fbbdf7640da112202fd3c8de44986f72f8b4d28ab7d5298fb0d374a6bbd1658ad0d4bf506cc2a429bfe7560adefb1787595d97570c0ed5e453751567e67b7a0cb5a4956806c9330deb96ed50dad5c2d32b220385ac589d8f4390a921326d72c4720d8972fb834c9e7f89a53491c2f31e3752040b032a5e96688bfa39a4a9f75e80a4a77c503b18eb801") 01:36:56 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000180)={0x79, 0x70}, 0x20) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x420000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) write$smackfs_change_rule(r0, &(0x7f0000000300)={'[\'', 0x20, '/dev/ubi_ctrl\x00', 0x20, 'wxabl', 0x20, 'tbl'}, 0x1c) statx(r1, &(0x7f0000000380)='./file1\x00', 0x5100, 0x7ff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x812c04, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB=',privport,fscache,cache=none,cache=loose,cache=loose,euid=', @ANYRESDEC=r3, @ANYBLOB=',obj_user=,mask=MAY_READ,\x00']) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x200a00, 0x0) mknodat(r4, &(0x7f00000002c0)='./file0\x00', 0x10, 0xa127) 01:36:56 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) mount$nfs4(&(0x7f00000004c0)='{-,[*', &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x3000, &(0x7f0000000580)={[{'.-\x02[-]]'}, {':\xf1-]'}, {}, {'user_id'}, {']'}, {'MMAP_CHECK'}, {'}%+'}, {}, {'%,+'}, {'fd'}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise}]}) (async) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', 0xee00}}, {@uid_lt={'uid<', 0xee01}}]}}, 0x0, 0x0, &(0x7f0000000440)="e0edecfac46bec4572d46ec490ac9bcea5627ecf81017264096b6d126dfbfcd105b28b8ff43370d416017da66668ef78dbd7eb25e0382de53c64ecc80593ee3a00c6fd") (async, rerun: 64) mount$nfs4(&(0x7f0000000000)='-\'\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240008, &(0x7f0000000100)={[{}, {'/&}\xdc&'}, {}, {'.)\\'}, {}, {'}%+'}], [{@flag='nomand'}, {@obj_type={'obj_type', 0x3d, '(,)%}'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '>:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x64, 0x32, 0x37, 0x31, 0x33, 0x64], 0x2d, [0x65, 0x31, 0x39, 0x33], 0x2d, [0x7c459fa7958eea6f, 0x64, 0x38, 0x30], 0x2d, [0x36, 0x50, 0x65, 0x39], 0x2d, [0x64, 0x31, 0x33, 0x66, 0x30, 0x32, 0x66, 0x36]}}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@dont_appraise}]}) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r0, &(0x7f0000000640)='./file0\x00', 0x4000, 0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000600)='./file0\x00', r5, r3, 0x1000) 01:36:56 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67c000, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d22}, 0xffffffffffffffff, 0xffff8000}}, 0x48) 01:36:57 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8, 0x200) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1be) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x7) 01:36:57 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x80c1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1756.633342][T22304] fuse: Bad value for 'fd' 01:36:57 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x19b045, 0x0) fstat(r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80000000}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:57 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67c000, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, {0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d22}, 0xffffffffffffffff, 0xffff8000}}, 0x48) [ 1756.733485][T22304] fuse: Bad value for 'fd' [ 1756.738675][T22304] fuse: Bad value for 'fd' [ 1756.763925][T22304] fuse: Bad value for 'fd' [ 1756.778857][T22311] fuse: Bad value for 'user_id' 01:36:57 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x2000, 0x400, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x100000, &(0x7f0000000440)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffff4bb}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x30000000}}], [{@seclabel}]}}, 0x0, 0x0, &(0x7f0000000540)="07a03d7800deb491b5ac7045dc0b59fdfb4265f4d16c07cf6a3405302e28d6c3218f1ecc9841b990159dae30f173a519df9c597fbbdf7640da112202fd3c8de44986f72f8b4d28ab7d5298fb0d374a6bbd1658ad0d4bf506cc2a429bfe7560adefb1787595d97570c0ed5e453751567e67b7a0cb5a4956806c9330deb96ed50dad5c2d32b220385ac589d8f4390a921326d72c4720d8972fb834c9e7f89a53491c2f31e3752040b032a5e96688bfa39a4a9f75e80a4a77c503b18eb801") [ 1756.792830][T22304] fuse: Bad value for 'fd' [ 1756.815924][T22304] fuse: Bad value for 'fd' 01:36:57 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x80c1) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:57 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8, 0x200) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1be) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x7) [ 1756.843343][T22304] fuse: Bad value for 'fd' [ 1756.878221][T22304] fuse: Bad value for 'fd' 01:36:57 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x19b045, 0x0) fstat(r0, &(0x7f00000000c0)) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80000000}) (async, rerun: 32) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (rerun: 32) [ 1756.904933][T22304] fuse: Bad value for 'fd' [ 1756.944842][T22304] fuse: Bad value for 'fd' [ 1756.982687][T22304] fuse: Bad value for 'fd' 01:36:57 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1757.012901][T22304] fuse: Bad value for 'fd' [ 1757.023983][T22304] fuse: Bad value for 'fd' 01:36:57 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x80c1) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) [ 1757.054460][T22304] fuse: Bad value for 'fd' [ 1757.057718][T22322] fuse: Bad value for 'user_id' [ 1757.068642][T22304] fuse: Bad value for 'fd' [ 1757.104128][T22304] fuse: Bad value for 'fd' [ 1757.117654][T22304] fuse: Bad value for 'fd' [ 1757.122398][T22322] fuse: Bad value for 'user_id' [ 1757.148533][T22304] fuse: Bad value for 'fd' [ 1757.160575][T22304] fuse: Bad value for 'fd' [ 1757.166658][T22322] fuse: Bad value for 'user_id' [ 1757.173880][T22322] fuse: Bad value for 'user_id' [ 1757.179555][T22322] fuse: Bad value for 'user_id' [ 1757.205314][T22304] fuse: Bad value for 'fd' [ 1757.223613][T22304] fuse: Bad value for 'fd' [ 1757.231456][T22322] fuse: Bad value for 'user_id' [ 1757.251168][T22304] fuse: Bad value for 'fd' [ 1757.259171][T22322] fuse: Bad value for 'user_id' [ 1757.292893][T22322] fuse: Bad value for 'user_id' [ 1757.308909][T22304] fuse: Bad value for 'fd' [ 1757.335241][T22322] fuse: Bad value for 'user_id' [ 1757.340608][T22304] fuse: Bad value for 'fd' [ 1757.365952][T22322] fuse: Bad value for 'user_id' [ 1757.373997][T22322] fuse: Bad value for 'user_id' [ 1757.379649][T22322] fuse: Bad value for 'user_id' [ 1757.396329][T22304] fuse: Bad value for 'fd' [ 1757.401515][T22304] fuse: Bad value for 'fd' [ 1757.411134][T22322] fuse: Bad value for 'user_id' [ 1757.433044][ T28] kauditd_printk_skb: 40171 callbacks suppressed [ 1757.433059][ T28] audit: type=1400 audit(1697852217.854:2892657): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="cpu1" dev="sysfs" ino=14523 [ 1757.437659][T22322] fuse: Bad value for 'user_id' [ 1757.439435][ T28] audit: type=1400 audit(1697852217.854:2892658): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="/" dev="sda1" ino=2 [ 1757.439482][ T28] audit: type=1400 audit(1697852217.854:2892659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="/" dev="sysfs" ino=1 [ 1757.466794][T22322] fuse: Bad value for 'user_id' [ 1757.482362][T22336] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1757.505617][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1757.514822][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1757.518443][ T4471] audit: audit_lost=1002889 audit_rate_limit=0 audit_backlog_limit=64 [ 1757.525799][ T4482] audit: audit_lost=1002890 audit_rate_limit=0 audit_backlog_limit=64 [ 1757.534090][ T4471] audit: backlog limit exceeded 01:36:57 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) mount$nfs4(&(0x7f00000004c0)='{-,[*', &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000540), 0x3000, &(0x7f0000000580)={[{'.-\x02[-]]'}, {':\xf1-]'}, {}, {'user_id'}, {']'}, {'MMAP_CHECK'}, {'}%+'}, {}, {'%,+'}, {'fd'}], [{@uid_eq={'uid', 0x3d, r2}}, {@appraise}]}) (async) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', 0xee00}}, {@uid_lt={'uid<', 0xee01}}]}}, 0x0, 0x0, &(0x7f0000000440)="e0edecfac46bec4572d46ec490ac9bcea5627ecf81017264096b6d126dfbfcd105b28b8ff43370d416017da66668ef78dbd7eb25e0382de53c64ecc80593ee3a00c6fd") mount$nfs4(&(0x7f0000000000)='-\'\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240008, &(0x7f0000000100)={[{}, {'/&}\xdc&'}, {}, {'.)\\'}, {}, {'}%+'}], [{@flag='nomand'}, {@obj_type={'obj_type', 0x3d, '(,)%}'}}, {@measure}, {@smackfsroot={'smackfsroot', 0x3d, '>:'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x63, 0x64, 0x32, 0x37, 0x31, 0x33, 0x64], 0x2d, [0x65, 0x31, 0x39, 0x33], 0x2d, [0x7c459fa7958eea6f, 0x64, 0x38, 0x30], 0x2d, [0x36, 0x50, 0x65, 0x39], 0x2d, [0x64, 0x31, 0x33, 0x66, 0x30, 0x32, 0x66, 0x36]}}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@permit_directio}, {@dont_appraise}]}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r0, &(0x7f0000000640)='./file0\x00', 0x4000, 0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r4, &(0x7f0000000600)='./file0\x00', r5, r3, 0x1000) 01:36:57 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 01:36:57 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x19b045, 0x0) fstat(r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80000000}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) [ 1757.547825][ T5056] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1757.548740][T22322] fuse: Bad value for 'user_id' [ 1757.561306][T22322] fuse: Bad value for 'user_id' [ 1757.573277][T22322] fuse: Bad value for 'user_id' 01:36:58 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x6) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1757.618900][T22322] fuse: Bad value for 'user_id' 01:36:58 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) [ 1757.655938][T22322] fuse: Bad value for 'user_id' 01:36:58 executing program 2: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1757.693549][T22322] fuse: Bad value for 'user_id' [ 1757.703480][T22349] fuse: Bad value for 'fd' [ 1757.737287][T22322] fuse: Bad value for 'user_id' [ 1757.775713][T22322] fuse: Bad value for 'user_id' 01:36:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0, 0x3}}, 0x10) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1757.818637][T22322] fuse: Bad value for 'user_id' 01:36:58 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8, 0x200) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1be) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x7) 01:36:58 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x6) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 01:36:58 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) 01:36:58 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 01:36:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0, 0x3}}, 0x10) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:58 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x6) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:58 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) [ 1758.134042][T22365] fuse: Bad value for 'user_id' [ 1758.134088][T22366] fuse: Bad value for 'user_id' 01:36:58 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x400, 0x5) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', r2, r3, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x1d0) r4 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) readlinkat(r4, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)=""/77, 0x4d) read$fb(r4, &(0x7f00000000c0)=""/176, 0xb0) 01:36:58 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0, 0x3}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r0, 0x3}}, 0x10) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:58 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) (async) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) (async) 01:36:58 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x480, &(0x7f00000001c0)={'trans=virtio,', {[{@privport}], [{@dont_appraise}, {@smackfsfloor}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '!*-(\xbc%+*}&{/@\xc1'}}, {@audit}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '#^-,'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:58 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x2) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) 01:36:58 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x400, 0x5) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', r2, r3, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x1d0) (async, rerun: 64) r4 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) readlinkat(r4, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)=""/77, 0x4d) read$fb(r4, &(0x7f00000000c0)=""/176, 0xb0) 01:36:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 01:36:59 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xb2535b830af39839}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7}}]}}, 0x1, 0x0, &(0x7f0000002240)="a57d8553616bfc63ff970fce53734f6e9b66c019953cc07f35cdbff6be94b8762c6f5c0a088cf7d6b87b4913e9932afe38fa588279557e45174b054bad7aa0d1641be0cf4f0285fb9b6f7109c39e5ea24b5d901a237c939bb144682a292510f399db90ec52") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:59 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, r1}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 01:36:59 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x480, &(0x7f00000001c0)={'trans=virtio,', {[{@privport}], [{@dont_appraise}, {@smackfsfloor}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '!*-(\xbc%+*}&{/@\xc1'}}, {@audit}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '#^-,'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:59 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x2) (async, rerun: 32) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) 01:36:59 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x400, 0x5) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', r2, r3, 0x0) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x1d0) r4 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) readlinkat(r4, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)=""/77, 0x4d) (async) read$fb(r4, &(0x7f00000000c0)=""/176, 0xb0) 01:36:59 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xb2535b830af39839}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7}}]}}, 0x1, 0x0, &(0x7f0000002240)="a57d8553616bfc63ff970fce53734f6e9b66c019953cc07f35cdbff6be94b8762c6f5c0a088cf7d6b87b4913e9932afe38fa588279557e45174b054bad7aa0d1641be0cf4f0285fb9b6f7109c39e5ea24b5d901a237c939bb144682a292510f399db90ec52") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:59 executing program 2: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1200) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:59 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x480, &(0x7f00000001c0)={'trans=virtio,', {[{@privport}], [{@dont_appraise}, {@smackfsfloor}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '!*-(\xbc%+*}&{/@\xc1'}}, {@audit}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '#^-,'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x480, &(0x7f00000001c0)={'trans=virtio,', {[{@privport}], [{@dont_appraise}, {@smackfsfloor}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@obj_role={'obj_role', 0x3d, '!*-(\xbc%+*}&{/@\xc1'}}, {@audit}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '#^-,'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:59 executing program 3: mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x2) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2, 0x2) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) 01:36:59 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xb2535b830af39839}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7}}]}}, 0x1, 0x0, &(0x7f0000002240)="a57d8553616bfc63ff970fce53734f6e9b66c019953cc07f35cdbff6be94b8762c6f5c0a088cf7d6b87b4913e9932afe38fa588279557e45174b054bad7aa0d1641be0cf4f0285fb9b6f7109c39e5ea24b5d901a237c939bb144682a292510f399db90ec52") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40000, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xb2535b830af39839}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x7}}]}}, 0x1, 0x0, &(0x7f0000002240)="a57d8553616bfc63ff970fce53734f6e9b66c019953cc07f35cdbff6be94b8762c6f5c0a088cf7d6b87b4913e9932afe38fa588279557e45174b054bad7aa0d1641be0cf4f0285fb9b6f7109c39e5ea24b5d901a237c939bb144682a292510f399db90ec52") (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:36:59 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x1000, 0x100) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x40001, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}], [{@appraise_type}, {@appraise}]}}, 0x0, 0x0, &(0x7f00000003c0)="3c70012a04a28d272fd89cbb62e00b52fc7d69db9be5fc68b3ee38bb9ce7f7da34baf0a9ac861779a2e32af4f7fe6dcef5a81cfd57d83b372ba6c60e08fe72d6e6c18f3441f7dec87436b20322f6ded6fe3a2e99a4bfbb50323d8467888d354140b0938e8edfa9d2d80479e67becee10a5b5199cdcf3351c19ea6bfe7a855d26041b6d185bcf015b3ac323f0d85406966f5aec1d028a8bf6d548ad618262db5be94e0b9f70a765bd7f780b17668a1a376ef4677d14436d408c5f92a2e1012466d33bf1a4f57e9455") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)={0x69, 0x7, 0x0, 0x4}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='nolazytime'}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) lchown(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, r4) 01:36:59 executing program 2: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1200) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:59 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"f986ec011f55c033499acdd975225ca3", 0x0, 0x0, {0x1, 0x7}, {0x80000000, 0x2fc}, 0x0, [0xfffffffffffffffb, 0xfffffffffffffff7, 0xffffffff, 0x200, 0x401, 0x80000000, 0x0, 0xfff, 0x48, 0x6, 0x81, 0x9, 0x6, 0x0, 0xffffffffffff7de0, 0x6]}) 01:36:59 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:59 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/75, 0x4b) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r1, &(0x7f00000002c0), 0x0) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 01:36:59 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:59 executing program 2: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1200) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:36:59 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"f986ec011f55c033499acdd975225ca3", 0x0, 0x0, {0x1, 0x7}, {0x80000000, 0x2fc}, 0x0, [0xfffffffffffffffb, 0xfffffffffffffff7, 0xffffffff, 0x200, 0x401, 0x80000000, 0x0, 0xfff, 0x48, 0x6, 0x81, 0x9, 0x6, 0x0, 0xffffffffffff7de0, 0x6]}) 01:36:59 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:36:59 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:36:59 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/75, 0x4b) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r1, &(0x7f00000002c0), 0x0) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x2000) (async) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/75, 0x4b) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$damon_contexts(r1, &(0x7f00000002c0), 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) (async) 01:36:59 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"f986ec011f55c033499acdd975225ca3", 0x0, 0x0, {0x1, 0x7}, {0x80000000, 0x2fc}, 0x0, [0xfffffffffffffffb, 0xfffffffffffffff7, 0xffffffff, 0x200, 0x401, 0x80000000, 0x0, 0xfff, 0x48, 0x6, 0x81, 0x9, 0x6, 0x0, 0xffffffffffff7de0, 0x6]}) 01:37:00 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x1000, 0x100) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x40001, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}], [{@appraise_type}, {@appraise}]}}, 0x0, 0x0, &(0x7f00000003c0)="3c70012a04a28d272fd89cbb62e00b52fc7d69db9be5fc68b3ee38bb9ce7f7da34baf0a9ac861779a2e32af4f7fe6dcef5a81cfd57d83b372ba6c60e08fe72d6e6c18f3441f7dec87436b20322f6ded6fe3a2e99a4bfbb50323d8467888d354140b0938e8edfa9d2d80479e67becee10a5b5199cdcf3351c19ea6bfe7a855d26041b6d185bcf015b3ac323f0d85406966f5aec1d028a8bf6d548ad618262db5be94e0b9f70a765bd7f780b17668a1a376ef4677d14436d408c5f92a2e1012466d33bf1a4f57e9455") (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)={0x69, 0x7, 0x0, 0x4}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='nolazytime'}]}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) lchown(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, r4) 01:37:00 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0xdc800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$capi20(r1, &(0x7f0000000080)={0x10, 0x1, 0x84, 0x81, 0x20, 0x2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x7a2c0, 0x0) 01:37:00 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:00 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:00 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) (async) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/75, 0x4b) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$damon_contexts(r1, &(0x7f00000002c0), 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async, rerun: 32) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 01:37:00 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"de9fbbf95ba58671e1e264712c59868d", 0x0, 0x0, {0x4, 0x1ff}, {0xfffffffffffffffa, 0x80}, 0x4, [0x1, 0xffffffffffffff00, 0x6, 0x7fffffffffffffff, 0x5, 0x3ff, 0x0, 0x2, 0xe1f, 0x21, 0x6, 0x8000000000000001, 0xc03, 0x2, 0x8, 0x7]}) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@aname={'aname', 0x3d, '/dev/ubi_ctrl\x00'}}, {@cache_loose}], [{@flag='rw'}]}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x9}}, 0x18) 01:37:00 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:00 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0xdc800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$capi20(r1, &(0x7f0000000080)={0x10, 0x1, 0x84, 0x81, 0x20, 0x2}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) (async) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x7a2c0, 0x0) 01:37:00 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"de9fbbf95ba58671e1e264712c59868d", 0x0, 0x0, {0x4, 0x1ff}, {0xfffffffffffffffa, 0x80}, 0x4, [0x1, 0xffffffffffffff00, 0x6, 0x7fffffffffffffff, 0x5, 0x3ff, 0x0, 0x2, 0xe1f, 0x21, 0x6, 0x8000000000000001, 0xc03, 0x2, 0x8, 0x7]}) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@aname={'aname', 0x3d, '/dev/ubi_ctrl\x00'}}, {@cache_loose}], [{@flag='rw'}]}}) (async) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@aname={'aname', 0x3d, '/dev/ubi_ctrl\x00'}}, {@cache_loose}], [{@flag='rw'}]}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x9}}, 0x18) 01:37:00 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) (async) mknodat(r1, &(0x7f0000000180)='./file0\x00', 0x1000, 0x100) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x40001, &(0x7f0000000300)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}], [{@appraise_type}, {@appraise}]}}, 0x0, 0x0, &(0x7f00000003c0)="3c70012a04a28d272fd89cbb62e00b52fc7d69db9be5fc68b3ee38bb9ce7f7da34baf0a9ac861779a2e32af4f7fe6dcef5a81cfd57d83b372ba6c60e08fe72d6e6c18f3441f7dec87436b20322f6ded6fe3a2e99a4bfbb50323d8467888d354140b0938e8edfa9d2d80479e67becee10a5b5199cdcf3351c19ea6bfe7a855d26041b6d185bcf015b3ac323f0d85406966f5aec1d028a8bf6d548ad618262db5be94e0b9f70a765bd7f780b17668a1a376ef4677d14436d408c5f92a2e1012466d33bf1a4f57e9455") quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)={0x69, 0x7, 0x0, 0x4}) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='nolazytime'}]}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r2, {0xee00, 0xee01}}, './file0\x00'}) lchown(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffffff, r4) 01:37:00 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 01:37:00 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:00 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xee01) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 01:37:00 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0xdc800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card3/oss_mixer\x00', 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$capi20(r1, &(0x7f0000000080)={0x10, 0x1, 0x84, 0x81, 0x20, 0x2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x7a2c0, 0x0) 01:37:00 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:00 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xee01) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 01:37:00 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000040)={"de9fbbf95ba58671e1e264712c59868d", 0x0, 0x0, {0x4, 0x1ff}, {0xfffffffffffffffa, 0x80}, 0x4, [0x1, 0xffffffffffffff00, 0x6, 0x7fffffffffffffff, 0x5, 0x3ff, 0x0, 0x2, 0xe1f, 0x21, 0x6, 0x8000000000000001, 0xc03, 0x2, 0x8, 0x7]}) (async) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), 0x8, &(0x7f00000003c0)={'trans=unix,', {[{@version_u}, {@aname={'aname', 0x3d, '/dev/ubi_ctrl\x00'}}, {@cache_loose}], [{@flag='rw'}]}}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x9}}, 0x18) 01:37:00 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 01:37:00 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="fff6ff7f000000002e2f66696c653000"]) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x1, 0x78, 0x180000, {r2}}, 0x20) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x50007, &(0x7f0000000280)=ANY=[@ANYBLOB="6d7e6313610f6777d5fd2d2bad55a169a06f64653d30313030303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030323030202c6d6f64653d30303030303030303030303030303030303008003030372c6d6f64653d303030303030d97e3030303030303030303030303030312c6d6f64653d3030303030303030303030303030303030303030302c61756469742c646f6e745f686173682c61707072616973655f747970653d696d617369672c6f626a5f757365723d2f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e63002c726f6f74636f"]) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x6, 0x34, 0x8, 0x9, 0x6, 0xde, 0x8aeb, 0x9, 0xffff, 0x4c2905ca, 0x2, 0x8, 0x3ff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 01:37:00 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0xee01) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 01:37:00 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=ANY=[@ANYBLOB="2092905b6192fac6ad2e"], r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='@*\x00', 0x0, r1) 01:37:01 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) open(&(0x7f0000000000)='./file1\x00', 0x48000, 0x0) 01:37:01 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 01:37:01 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x206c2, 0xb2) 01:37:01 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="fff6ff7f000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="fff6ff7f000000002e2f66696c653000"]) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x1, 0x78, 0x180000, {r2}}, 0x20) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x50007, &(0x7f0000000280)=ANY=[@ANYBLOB="6d7e6313610f6777d5fd2d2bad55a169a06f64653d30313030303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030323030202c6d6f64653d30303030303030303030303030303030303008003030372c6d6f64653d303030303030d97e3030303030303030303030303030312c6d6f64653d3030303030303030303030303030303030303030302c61756469742c646f6e745f686173682c61707072616973655f747970653d696d617369672c6f626a5f757365723d2f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e63002c726f6f74636f"]) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x6, 0x34, 0x8, 0x9, 0x6, 0xde, 0x8aeb, 0x9, 0xffff, 0x4c2905ca, 0x2, 0x8, 0x3ff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 01:37:01 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:01 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=ANY=[@ANYBLOB="2092905b6192fac6ad2e"], r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='@*\x00', 0x0, r1) 01:37:01 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="fff6ff7f000000002e2f66696c653000"]) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1000, &(0x7f00000000c0)={0x1, 0x78, 0x180000, {r2}}, 0x20) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) (async, rerun: 64) mount$bpf(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240), 0x50007, &(0x7f0000000280)=ANY=[@ANYBLOB="6d7e6313610f6777d5fd2d2bad55a169a06f64653d30313030303030303030303030303030303030303030312c6d6f64653d30303030303030303030303030303030303030323030202c6d6f64653d30303030303030303030303030303030303008003030372c6d6f64653d303030303030d97e3030303030303030303030303030312c6d6f64653d3030303030303030303030303030303030303030302c61756469742c646f6e745f686173682c61707072616973655f747970653d696d617369672c6f626a5f757365723d2f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e63002c726f6f74636f"]) (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x0, 0x6, 0x34, 0x8, 0x9, 0x6, 0xde, 0x8aeb, 0x9, 0xffff, 0x4c2905ca, 0x2, 0x8, 0x3ff}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 01:37:01 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x206c2, 0xb2) 01:37:01 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) 01:37:01 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=ANY=[@ANYBLOB="2092905b6192fac6ad2e"], r0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='@*\x00', 0x0, r1) 01:37:01 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6000000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)=':.%.-&\':*(-$\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:01 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) open(&(0x7f0000000000)='./file1\x00', 0x48000, 0x0) 01:37:01 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x206c2, 0xb2) (async) open(&(0x7f0000000000)='./file0\x00', 0x206c2, 0xb2) 01:37:01 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6000000}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6000000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)=':.%.-&\':*(-$\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:01 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x17d243, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:01 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:01 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:37:01 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) open(&(0x7f0000000000)='./file1\x00', 0x48000, 0x0) 01:37:02 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:02 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6000000}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)=':.%.-&\':*(-$\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6000000}}, './file0\x00'}) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)=':.%.-&\':*(-$\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:02 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:37:02 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0xffffff7f) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000040)='\'\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)=ANY=[@ANYBLOB="2129402c2c2e407d2d26c02c2f2a232c7b287d7b2c265e502f2c2c4027252c2c2c6d6561737572652c61707072616973652c686173682c7339b294fce2cbba5e8480987562"]) 01:37:02 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:02 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x17d243, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0]) 01:37:02 executing program 2: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 01:37:02 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="9500f3709b7e000000000069bbbd36f0a2b9b1a7c1a9139dac7bffffff7f0000000200000031cd20e7220347460f370e945373a04808809faa33a7cd2945a6863f6f60c1161bc2f50c648a54502a6fb9fba69176ccc3d63e10c6f9746193a64ca3dc71d5f98977d4546b02d65d74dc676cc4142274005be6826d2f362eb5a242db2aa8b3945d92b81d5daa208dfa71"]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13a) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',)\\:]\\/-\x00', &(0x7f0000000280)='memory.pressure\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f00000001c0)='./file0\x00', r3) 01:37:02 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:37:02 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0xffffff7f) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000040)='\'\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)=ANY=[@ANYBLOB="2129402c2c2e407d2d26c02c2f2a232c7b287d7b2c265e502f2c2c4027252c2c2c6d6561737572652c61707072616973652c686173682c7339b294fce2cbba5e8480987562"]) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0xffffff7f) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$nfs4(&(0x7f0000000040)='\'\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)=ANY=[@ANYBLOB="2129402c2c2e407d2d26c02c2f2a232c7b287d7b2c265e502f2c2c4027252c2c2c6d6561737572652c61707072616973652c686173682c7339b294fce2cbba5e8480987562"]) (async) 01:37:02 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x17d243, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:02 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x18a00, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 01:37:02 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="9500f3709b7e000000000069bbbd36f0a2b9b1a7c1a9139dac7bffffff7f0000000200000031cd20e7220347460f370e945373a04808809faa33a7cd2945a6863f6f60c1161bc2f50c648a54502a6fb9fba69176ccc3d63e10c6f9746193a64ca3dc71d5f98977d4546b02d65d74dc676cc4142274005be6826d2f362eb5a242db2aa8b3945d92b81d5daa208dfa71"]) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13a) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',)\\:]\\/-\x00', &(0x7f0000000280)='memory.pressure\x00', 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f00000001c0)='./file0\x00', r3) 01:37:02 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '\\%,.{>-!H*@}@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.pressure\x00'}}, {@subj_user={'subj_user', 0x3d, '**\xb9#+!*.+-%['}}, {@subj_type}, {@appraise}]}}, 0x1, 0x0, &(0x7f0000000100)="4994a82e69c0761983f27a29670ce397b0db6d93a87f35ae03efdd16ab013affcab0318da855c2bd63a52a73379cce132fa9bc7e71fbbe785f9725e24e235845c707e9d34171c73807") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000002180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0026f6ff000000002e2f66696c65302d47505100ab3bd3cc793f4bc5ca34c3a1948ee6dd90ba23013536ed914a7f24357f0d4ac213fe1a7a19c09aa8e546f7eb663205caa457887fc0c33e9ca3e4a58233ac2fa151904651aaa33375afa14e8587af3485fc6821ece65ef2c137ecc228a767aec47d7f58165d"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000002140)={0x0, 0x58}, 0x2) mount_setattr(r1, &(0x7f0000000180)='./file0\x00', 0x8900, &(0x7f00000003c0)={0x5, 0xf1, 0x100000, {r2}}, 0x20) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440)={0x2003}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000480)='\xb1$\x00', &(0x7f00000004c0)='./file1\x00', r1) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x481, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002580)={0x20, 0x0, r8}, 0x20) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0x0, r8, {0x6, 0x4, 0xfffffffb, 0x63}}, 0x20) 01:37:02 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x40000, 0x108) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x110020, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303031312c6d61736b3d5e4d41595f57524954452c646f6e745f68617368000000000000008065723d29282c636f6e74611d5456eb5030a2656d5f752c00243689734ac6881430b9f1c83d0d1b4ce1636c2d838ef2e3065055dd88900e92"]) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) chroot(&(0x7f0000000100)='./file0/file0\x00') 01:37:02 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x18a00, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x18a00, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') (async) 01:37:02 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0xffffff7f) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) mount$nfs4(&(0x7f0000000040)='\'\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000140)=ANY=[@ANYBLOB="2129402c2c2e407d2d26c02c2f2a232c7b287d7b2c265e502f2c2c4027252c2c2c6d6561737572652c61707072616973652c686173682c7339b294fce2cbba5e8480987562"]) (rerun: 64) 01:37:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0]) (async) [ 1762.443063][ T28] kauditd_printk_skb: 39922 callbacks suppressed [ 1762.443080][ T28] audit: type=1400 audit(1697852222.854:2913349): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4482 comm="udevd" name="mq" dev="sysfs" ino=14517 [ 1762.465967][T22614] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1762.475206][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1762.481772][ T4471] audit: audit_lost=1009399 audit_rate_limit=0 audit_backlog_limit=64 01:37:03 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0x0) (rerun: 32) open(&(0x7f0000000140)='./file1\x00', 0x40000, 0x108) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x110020, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303031312c6d61736b3d5e4d41595f57524954452c646f6e745f68617368000000000000008065723d29282c636f6e74611d5456eb5030a2656d5f752c00243689734ac6881430b9f1c83d0d1b4ce1636c2d838ef2e3065055dd88900e92"]) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) (rerun: 32) chroot(&(0x7f0000000100)='./file0/file0\x00') [ 1762.490113][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1762.490130][ T4482] audit: audit_lost=1009400 audit_rate_limit=0 audit_backlog_limit=64 [ 1762.490147][ T4482] audit: backlog limit exceeded [ 1762.490310][ T4482] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1762.496995][ T4471] audit: backlog limit exceeded [ 1762.522343][T22611] audit: audit_backlog=66 > audit_backlog_limit=64 01:37:03 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="9500f3709b7e000000000069bbbd36f0a2b9b1a7c1a9139dac7bffffff7f0000000200000031cd20e7220347460f370e945373a04808809faa33a7cd2945a6863f6f60c1161bc2f50c648a54502a6fb9fba69176ccc3d63e10c6f9746193a64ca3dc71d5f98977d4546b02d65d74dc676cc4142274005be6826d2f362eb5a242db2aa8b3945d92b81d5daa208dfa71"]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x13a) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)=',)\\:]\\/-\x00', &(0x7f0000000280)='memory.pressure\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000180)='/sys/fs/smackfs/revoke-subject\x00', &(0x7f00000001c0)='./file0\x00', r3) 01:37:03 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '\\%,.{>-!H*@}@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.pressure\x00'}}, {@subj_user={'subj_user', 0x3d, '**\xb9#+!*.+-%['}}, {@subj_type}, {@appraise}]}}, 0x1, 0x0, &(0x7f0000000100)="4994a82e69c0761983f27a29670ce397b0db6d93a87f35ae03efdd16ab013affcab0318da855c2bd63a52a73379cce132fa9bc7e71fbbe785f9725e24e235845c707e9d34171c73807") (async) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '\\%,.{>-!H*@}@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.pressure\x00'}}, {@subj_user={'subj_user', 0x3d, '**\xb9#+!*.+-%['}}, {@subj_type}, {@appraise}]}}, 0x1, 0x0, &(0x7f0000000100)="4994a82e69c0761983f27a29670ce397b0db6d93a87f35ae03efdd16ab013affcab0318da855c2bd63a52a73379cce132fa9bc7e71fbbe785f9725e24e235845c707e9d34171c73807") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000002180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0026f6ff000000002e2f66696c65302d47505100ab3bd3cc793f4bc5ca34c3a1948ee6dd90ba23013536ed914a7f24357f0d4ac213fe1a7a19c09aa8e546f7eb663205caa457887fc0c33e9ca3e4a58233ac2fa151904651aaa33375afa14e8587af3485fc6821ece65ef2c137ecc228a767aec47d7f58165d"]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000002140)={0x0, 0x58}, 0x2) mount_setattr(r1, &(0x7f0000000180)='./file0\x00', 0x8900, &(0x7f00000003c0)={0x5, 0xf1, 0x100000, {r2}}, 0x20) (async) mount_setattr(r1, &(0x7f0000000180)='./file0\x00', 0x8900, &(0x7f00000003c0)={0x5, 0xf1, 0x100000, {r2}}, 0x20) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440)={0x2003}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000480)='\xb1$\x00', &(0x7f00000004c0)='./file1\x00', r1) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x481, 0x0) (async) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x481, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002580)={0x20, 0x0, r8}, 0x20) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0x0, r8, {0x6, 0x4, 0xfffffffb, 0x63}}, 0x20) (async) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0x0, r8, {0x6, 0x4, 0xfffffffb, 0x63}}, 0x20) 01:37:03 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x18a00, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') 01:37:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) (async, rerun: 64) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) fspick(r1, &(0x7f0000000200)='./file0\x00', 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240)) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0]) 01:37:03 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xee01, 0x0) (async) open(&(0x7f0000000140)='./file1\x00', 0x40000, 0x108) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x110020, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64653d30303030303030303030303030303030303030303030362c6d6f64653d30303030303030303030303030303030303030303031312c6d61736b3d5e4d41595f57524954452c646f6e745f68617368000000000000008065723d29282c636f6e74611d5456eb5030a2656d5f752c00243689734ac6881430b9f1c83d0d1b4ce1636c2d838ef2e3065055dd88900e92"]) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0/file0\x00'}) (async) chroot(&(0x7f0000000100)='./file0/file0\x00') 01:37:03 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240933, &(0x7f00000001c0)={'trans=virtio,', {[{@access_any}, {@posixacl}, {@posixacl}, {@version_9p2000}, {@privport}], [{@obj_role}, {@subj_type={'subj_type', 0x3d, '*^,\\:\':[-&)\'[}@'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0xf}}, {@uid_gt={'uid>', r0}}, {@euid_eq}, {@fsname}]}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:03 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:03 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '\\%,.{>-!H*@}@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.pressure\x00'}}, {@subj_user={'subj_user', 0x3d, '**\xb9#+!*.+-%['}}, {@subj_type}, {@appraise}]}}, 0x1, 0x0, &(0x7f0000000100)="4994a82e69c0761983f27a29670ce397b0db6d93a87f35ae03efdd16ab013affcab0318da855c2bd63a52a73379cce132fa9bc7e71fbbe785f9725e24e235845c707e9d34171c73807") (async) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@default_permissions}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@smackfshat={'smackfshat', 0x3d, '\\%,.{>-!H*@}@'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, 'memory.pressure\x00'}}, {@subj_user={'subj_user', 0x3d, '**\xb9#+!*.+-%['}}, {@subj_type}, {@appraise}]}}, 0x1, 0x0, &(0x7f0000000100)="4994a82e69c0761983f27a29670ce397b0db6d93a87f35ae03efdd16ab013affcab0318da855c2bd63a52a73379cce132fa9bc7e71fbbe785f9725e24e235845c707e9d34171c73807") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000002180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0026f6ff000000002e2f66696c65302d47505100ab3bd3cc793f4bc5ca34c3a1948ee6dd90ba23013536ed914a7f24357f0d4ac213fe1a7a19c09aa8e546f7eb663205caa457887fc0c33e9ca3e4a58233ac2fa151904651aaa33375afa14e8587af3485fc6821ece65ef2c137ecc228a767aec47d7f58165d"]) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000002140)={0x0, 0x58}, 0x2) mount_setattr(r1, &(0x7f0000000180)='./file0\x00', 0x8900, &(0x7f00000003c0)={0x5, 0xf1, 0x100000, {r2}}, 0x20) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000440)={0x2003}) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000480)='\xb1$\x00', &(0x7f00000004c0)='./file1\x00', r1) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x481, 0x0) (async) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x481, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r7, &(0x7f0000002580)={0x20, 0x0, r8}, 0x20) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0x0, r8, {0x6, 0x4, 0xfffffffb, 0x63}}, 0x20) (async) write$FUSE_IOCTL(r6, &(0x7f0000000500)={0x20, 0x0, r8, {0x6, 0x4, 0xfffffffb, 0x63}}, 0x20) 01:37:03 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 01:37:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1100003, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:03 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:03 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) (rerun: 64) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240933, &(0x7f00000001c0)={'trans=virtio,', {[{@access_any}, {@posixacl}, {@posixacl}, {@version_9p2000}, {@privport}], [{@obj_role}, {@subj_type={'subj_type', 0x3d, '*^,\\:\':[-&)\'[}@'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0xf}}, {@uid_gt={'uid>', r0}}, {@euid_eq}, {@fsname}]}}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x71, r1, 0x0, 0x0, 0x1}}, 0x20) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:03 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 01:37:03 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) (rerun: 64) 01:37:03 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:03 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) chroot(&(0x7f0000000040)='./file0\x00') 01:37:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x71, r1, 0x0, 0x0, 0x1}}, 0x20) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1100003, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:03 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240933, &(0x7f00000001c0)={'trans=virtio,', {[{@access_any}, {@posixacl}, {@posixacl}, {@version_9p2000}, {@privport}], [{@obj_role}, {@subj_type={'subj_type', 0x3d, '*^,\\:\':[-&)\'[}@'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0xf}}, {@uid_gt={'uid>', r0}}, {@euid_eq}, {@fsname}]}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140), 0x6000) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x240933, &(0x7f00000001c0)={'trans=virtio,', {[{@access_any}, {@posixacl}, {@posixacl}, {@version_9p2000}, {@privport}], [{@obj_role}, {@subj_type={'subj_type', 0x3d, '*^,\\:\':[-&)\'[}@'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@pcr={'pcr', 0x3d, 0xf}}, {@uid_gt={'uid>', r0}}, {@euid_eq}, {@fsname}]}}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:04 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000040)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1100003, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:04 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) chroot(&(0x7f0000000040)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) chroot(&(0x7f0000000040)='./file0\x00') (async) 01:37:04 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x71, r1, 0x0, 0x0, 0x1}}, 0x20) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0/file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080)=0x71, r1, 0x0, 0x0, 0x1}}, 0x20) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:37:04 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010019000100000018060000c37e3750e917fe154b9389914b4fa88de6f2c269197acaba86da12f34c9ad5cebf", @ANYRES32=0xffffffffffffffff, @ANYBLOB="950f0000000000002e2f66296c653000476ad67295e525d33775ec6b355faef7d3a180c200a46163b39e65c64ca6dff4820c1eaa0c51b910470a00000000"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, r1}}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"492b4e21425d0b37c9df80c52642a5ae", 0x0, 0x0, {0x4, 0x120000}, {0x4, 0xc0}, 0x800, [0x3, 0xbb, 0x4, 0x1ff, 0x800, 0x5, 0x52a, 0x60, 0x81, 0x7f, 0x100000001, 0xfef, 0x5, 0x0, 0xd72, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"15eedec00a228a5e8983419571f66e82", r4, 0x0, {0x5, 0x1}, {0x0, 0x5c147c74}, 0x81, [0x751, 0x2, 0x40, 0x3, 0x7ff, 0x3ff, 0x1, 0x4, 0x1, 0x7fffffff, 0x8, 0x6, 0x8, 0x7, 0x1, 0x20]}) openat$cgroup_pressure(r1, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x300, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r7, &(0x7f0000000240)='./file0\x00', 0x410000, 0x20) lchown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 01:37:04 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async, rerun: 32) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r1, 0x0, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000040)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:04 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) 01:37:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6cf, @remote, 0x4}, r1}}, 0x30) mknod(&(0x7f0000000080)='./file0\x00', 0xa4, 0x13) open(&(0x7f0000000000)='./file0\x00', 0xd07101, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r2, &(0x7f00000000c0)='\x00', 0x6000, 0xde6, &(0x7f0000000100)) 01:37:04 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='vY\x00\x00\x00./f/file0\x00\x00\x00\x00']) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}], 0xa, "97510701e94d4ee9d24b47fe45ed114bd1e3eb3a2aab865fbbb2315c06350c6bf6c4738c6084aefdc49fe53a4f631345d5f0ba2d67efe6d7ed48da4b808871a148f99ed0ebfa6f3b1279e44ff3410c6505cbdafb79b817e8b610fdd7d06624c46890bde13f15531d96dd0cd2b8"}, 0x9e) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) 01:37:04 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:04 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010019000100000018060000c37e3750e917fe154b9389914b4fa88de6f2c269197acaba86da12f34c9ad5cebf", @ANYRES32=0xffffffffffffffff, @ANYBLOB="950f0000000000002e2f66296c653000476ad67295e525d33775ec6b355faef7d3a180c200a46163b39e65c64ca6dff4820c1eaa0c51b910470a00000000"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, r1}}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"492b4e21425d0b37c9df80c52642a5ae", 0x0, 0x0, {0x4, 0x120000}, {0x4, 0xc0}, 0x800, [0x3, 0xbb, 0x4, 0x1ff, 0x800, 0x5, 0x52a, 0x60, 0x81, 0x7f, 0x100000001, 0xfef, 0x5, 0x0, 0xd72, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"15eedec00a228a5e8983419571f66e82", r4, 0x0, {0x5, 0x1}, {0x0, 0x5c147c74}, 0x81, [0x751, 0x2, 0x40, 0x3, 0x7ff, 0x3ff, 0x1, 0x4, 0x1, 0x7fffffff, 0x8, 0x6, 0x8, 0x7, 0x1, 0x20]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"15eedec00a228a5e8983419571f66e82", r4, 0x0, {0x5, 0x1}, {0x0, 0x5c147c74}, 0x81, [0x751, 0x2, 0x40, 0x3, 0x7ff, 0x3ff, 0x1, 0x4, 0x1, 0x7fffffff, 0x8, 0x6, 0x8, 0x7, 0x1, 0x20]}) openat$cgroup_pressure(r1, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x300, 0x1) (async) r5 = open(&(0x7f0000000040)='./file1\x00', 0x300, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) (async) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r7, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r7, &(0x7f0000000240)='./file0\x00', 0x410000, 0x20) lchown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) 01:37:04 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) r3 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r3, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000040)) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (rerun: 64) 01:37:04 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x3440, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=00000000000000000007777,mode=00000000000000000000037,mode=00000000000000000000001,mode=01777777777777777777777,mode=00000000000000Fs~000000001,mode=00000000000000000010000,mode=00000000000000000000011,smackfsroot=bpf\x00,fsmagic=0x0000000000000003,appraise,fsname=syz\x00,obj_user=fowne']) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000600), 0x1000, &(0x7f00000007c0)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x81}}, {@cachetag={'cachetag', 0x3d, 'fsname'}}, {@privport}, {@access_client}, {@uname={'uname', 0x3d, 'fsname'}}]}}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x212000, &(0x7f0000000380)={'trans=unix,', {[{@cache_none}, {@mmap}], [{@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', r2}}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x800) readlink(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)=""/96, 0x60) syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='.\x00', 0x810000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,uid>', @ANYRESDEC=r2, @ANYBLOB='Cfowner=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365723d7b2b29282dad65242c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r2, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',fsuuid=f\x008065f5-6c62-7f13-2e46-4adc97df,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000ac0)="cb5ffdcf1a95edcd051e46e1908871b4bc007b85851c681942a0582574ae7060a2dca9586dbfcc3ed0d7cd50b43923bf2c44cf8a6b1cd8c3f142") readlinkat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=""/4090, 0xffa) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xb9b6}}], [{@euid_eq={'euid', 0x3d, r2}}]}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x301000, &(0x7f0000000180)={'trans=xen,', {[{@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) 01:37:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6cf, @remote, 0x4}, r1}}, 0x30) (async) mknod(&(0x7f0000000080)='./file0\x00', 0xa4, 0x13) open(&(0x7f0000000000)='./file0\x00', 0xd07101, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r2, &(0x7f00000000c0)='\x00', 0x6000, 0xde6, &(0x7f0000000100)) 01:37:04 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='vY\x00\x00\x00./f/file0\x00\x00\x00\x00']) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}], 0xa, "97510701e94d4ee9d24b47fe45ed114bd1e3eb3a2aab865fbbb2315c06350c6bf6c4738c6084aefdc49fe53a4f631345d5f0ba2d67efe6d7ed48da4b808871a148f99ed0ebfa6f3b1279e44ff3410c6505cbdafb79b817e8b610fdd7d06624c46890bde13f15531d96dd0cd2b8"}, 0x9e) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x4) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) 01:37:04 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:04 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x4, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="010019000100000018060000c37e3750e917fe154b9389914b4fa88de6f2c269197acaba86da12f34c9ad5cebf", @ANYRES32=0xffffffffffffffff, @ANYBLOB="950f0000000000002e2f66296c653000476ad67295e525d33775ec6b355faef7d3a180c200a46163b39e65c64ca6dff4820c1eaa0c51b910470a00000000"]) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x100000, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000540)={0x12, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, r1}}, 0x18) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000002c0)={"492b4e21425d0b37c9df80c52642a5ae", 0x0, 0x0, {0x4, 0x120000}, {0x4, 0xc0}, 0x800, [0x3, 0xbb, 0x4, 0x1ff, 0x800, 0x5, 0x52a, 0x60, 0x81, 0x7f, 0x100000001, 0xfef, 0x5, 0x0, 0xd72, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000003c0)={"15eedec00a228a5e8983419571f66e82", r4, 0x0, {0x5, 0x1}, {0x0, 0x5c147c74}, 0x81, [0x751, 0x2, 0x40, 0x3, 0x7ff, 0x3ff, 0x1, 0x4, 0x1, 0x7fffffff, 0x8, 0x6, 0x8, 0x7, 0x1, 0x20]}) (async) openat$cgroup_pressure(r1, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) (async) r5 = open(&(0x7f0000000040)='./file1\x00', 0x300, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x8000000000000000) (async) renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat(r6, &(0x7f00000001c0)='./file1\x00', 0x24000, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat(r7, &(0x7f0000000240)='./file0\x00', 0x410000, 0x20) lchown(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) [ 1764.393857][T22726] fuse: Bad value for 'fd' 01:37:04 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x399746, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e06000000653000"]) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000002c0)={0xf8, 0x0, 0x20000, {r3}}, 0x20) write$smackfs_label(r2, 0x0, 0x0) fcntl$getown(r2, 0x9) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"44400199c2ac7087cc5f8b458f24148c", 0x0, 0x0, {0x5}, {0x54b, 0x1}, 0x2, [0x101, 0x4, 0x2, 0x2, 0x7, 0x81, 0x8000000000000000, 0x3, 0x5, 0x7, 0x3516, 0x100000000, 0x3f, 0x1, 0x9, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"ca166fa6ebe40845e906b6183b02b974", 0x0, r4, {0x100000001, 0x2a}, {0x6, 0x5}, 0x0, [0x38, 0x4, 0x4, 0x9, 0xe408, 0x7fffffffffffffff, 0x4, 0x7, 0xfffffffffffffffa, 0x8001, 0x0, 0x82bc, 0x9, 0x8, 0x3, 0x1]}) 01:37:04 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='vY\x00\x00\x00./f/file0\x00\x00\x00\x00']) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}], 0xa, "97510701e94d4ee9d24b47fe45ed114bd1e3eb3a2aab865fbbb2315c06350c6bf6c4738c6084aefdc49fe53a4f631345d5f0ba2d67efe6d7ed48da4b808871a148f99ed0ebfa6f3b1279e44ff3410c6505cbdafb79b817e8b610fdd7d06624c46890bde13f15531d96dd0cd2b8"}, 0x9e) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x4) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='vY\x00\x00\x00./f/file0\x00\x00\x00\x00']) (async) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}], 0xa, "97510701e94d4ee9d24b47fe45ed114bd1e3eb3a2aab865fbbb2315c06350c6bf6c4738c6084aefdc49fe53a4f631345d5f0ba2d67efe6d7ed48da4b808871a148f99ed0ebfa6f3b1279e44ff3410c6505cbdafb79b817e8b610fdd7d06624c46890bde13f15531d96dd0cd2b8"}, 0x9e) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) renameat2(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) (async) 01:37:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6cf, @remote, 0x4}, r1}}, 0x30) mknod(&(0x7f0000000080)='./file0\x00', 0xa4, 0x13) open(&(0x7f0000000000)='./file0\x00', 0xd07101, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r2, &(0x7f00000000c0)='\x00', 0x6000, 0xde6, &(0x7f0000000100)) 01:37:05 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:05 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xee01) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x581800, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '[.'}, {}], 0xa, "a544a31ae4a6d55fccd5a2b7caa842b4724a1f6c172a0aae49b476bcdfb79534d01d860c9c9d59a2d2b0d8db37b3463ce64b1239f9c95e5d291a1fb733140af62a0256bc602d49e906f3b990013f4b29f7a1268b7f63d5909d36aa26dcdd078015d0af4c90388361e03b5803c8267dc795"}, 0x81) 01:37:05 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x3440, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=00000000000000000007777,mode=00000000000000000000037,mode=00000000000000000000001,mode=01777777777777777777777,mode=00000000000000Fs~000000001,mode=00000000000000000010000,mode=00000000000000000000011,smackfsroot=bpf\x00,fsmagic=0x0000000000000003,appraise,fsname=syz\x00,obj_user=fowne']) (rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000600), 0x1000, &(0x7f00000007c0)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x81}}, {@cachetag={'cachetag', 0x3d, 'fsname'}}, {@privport}, {@access_client}, {@uname={'uname', 0x3d, 'fsname'}}]}}) (async) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x212000, &(0x7f0000000380)={'trans=unix,', {[{@cache_none}, {@mmap}], [{@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', r2}}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x800) (async) readlink(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)=""/96, 0x60) (async) syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='.\x00', 0x810000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,uid>', @ANYRESDEC=r2, @ANYBLOB='Cfowner=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365723d7b2b29282dad65242c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r2, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',fsuuid=f\x008065f5-6c62-7f13-2e46-4adc97df,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000ac0)="cb5ffdcf1a95edcd051e46e1908871b4bc007b85851c681942a0582574ae7060a2dca9586dbfcc3ed0d7cd50b43923bf2c44cf8a6b1cd8c3f142") (async) readlinkat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=""/4090, 0xffa) (async) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xb9b6}}], [{@euid_eq={'euid', 0x3d, r2}}]}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x301000, &(0x7f0000000180)={'trans=xen,', {[{@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) 01:37:05 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000080)) 01:37:05 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x399746, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e06000000653000"]) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000002c0)={0xf8, 0x0, 0x20000, {r3}}, 0x20) write$smackfs_label(r2, 0x0, 0x0) fcntl$getown(r2, 0x9) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"44400199c2ac7087cc5f8b458f24148c", 0x0, 0x0, {0x5}, {0x54b, 0x1}, 0x2, [0x101, 0x4, 0x2, 0x2, 0x7, 0x81, 0x8000000000000000, 0x3, 0x5, 0x7, 0x3516, 0x100000000, 0x3f, 0x1, 0x9, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"ca166fa6ebe40845e906b6183b02b974", 0x0, r4, {0x100000001, 0x2a}, {0x6, 0x5}, 0x0, [0x38, 0x4, 0x4, 0x9, 0xe408, 0x7fffffffffffffff, 0x4, 0x7, 0xfffffffffffffffa, 0x8001, 0x0, 0x82bc, 0x9, 0x8, 0x3, 0x1]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x399746, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e06000000653000"]) (async) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000002c0)={0xf8, 0x0, 0x20000, {r3}}, 0x20) (async) write$smackfs_label(r2, 0x0, 0x0) (async) fcntl$getown(r2, 0x9) (async) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"44400199c2ac7087cc5f8b458f24148c", 0x0, 0x0, {0x5}, {0x54b, 0x1}, 0x2, [0x101, 0x4, 0x2, 0x2, 0x7, 0x81, 0x8000000000000000, 0x3, 0x5, 0x7, 0x3516, 0x100000000, 0x3f, 0x1, 0x9, 0x6]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"ca166fa6ebe40845e906b6183b02b974", 0x0, r4, {0x100000001, 0x2a}, {0x6, 0x5}, 0x0, [0x38, 0x4, 0x4, 0x9, 0xe408, 0x7fffffffffffffff, 0x4, 0x7, 0xfffffffffffffffa, 0x8001, 0x0, 0x82bc, 0x9, 0x8, 0x3, 0x1]}) (async) 01:37:05 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd0}}, './file0/file0\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x1) 01:37:05 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000180)={[{'\x00v'}, {'\x01\x00*%-Y'}], [{@smackfsroot={'smackfsroot', 0x3d, '\',:-'}}, {@seclabel}]}) 01:37:05 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xee01) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x581800, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '[.'}, {}], 0xa, "a544a31ae4a6d55fccd5a2b7caa842b4724a1f6c172a0aae49b476bcdfb79534d01d860c9c9d59a2d2b0d8db37b3463ce64b1239f9c95e5d291a1fb733140af62a0256bc602d49e906f3b990013f4b29f7a1268b7f63d5909d36aa26dcdd078015d0af4c90388361e03b5803c8267dc795"}, 0x81) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xee01) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x581800, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '[.'}, {}], 0xa, "a544a31ae4a6d55fccd5a2b7caa842b4724a1f6c172a0aae49b476bcdfb79534d01d860c9c9d59a2d2b0d8db37b3463ce64b1239f9c95e5d291a1fb733140af62a0256bc602d49e906f3b990013f4b29f7a1268b7f63d5909d36aa26dcdd078015d0af4c90388361e03b5803c8267dc795"}, 0x81) (async) 01:37:05 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000080)) 01:37:05 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd0}}, './file0/file0\x00'}) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x1) (rerun: 32) 01:37:05 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x399746, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="02000000000000002e06000000653000"]) mount_setattr(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f00000002c0)={0xf8, 0x0, 0x20000, {r3}}, 0x20) (async, rerun: 64) write$smackfs_label(r2, 0x0, 0x0) (rerun: 64) fcntl$getown(r2, 0x9) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"44400199c2ac7087cc5f8b458f24148c", 0x0, 0x0, {0x5}, {0x54b, 0x1}, 0x2, [0x101, 0x4, 0x2, 0x2, 0x7, 0x81, 0x8000000000000000, 0x3, 0x5, 0x7, 0x3516, 0x100000000, 0x3f, 0x1, 0x9, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000001c0)={"ca166fa6ebe40845e906b6183b02b974", 0x0, r4, {0x100000001, 0x2a}, {0x6, 0x5}, 0x0, [0x38, 0x4, 0x4, 0x9, 0xe408, 0x7fffffffffffffff, 0x4, 0x7, 0xfffffffffffffffa, 0x8001, 0x0, 0x82bc, 0x9, 0x8, 0x3, 0x1]}) [ 1765.023742][T22773] nfs4: Bad value for 'source' 01:37:05 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000180)={[{'\x00v'}, {'\x01\x00*%-Y'}], [{@smackfsroot={'smackfsroot', 0x3d, '\',:-'}}, {@seclabel}]}) 01:37:05 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x3440, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=00000000000000000007777,mode=00000000000000000000037,mode=00000000000000000000001,mode=01777777777777777777777,mode=00000000000000Fs~000000001,mode=00000000000000000010000,mode=00000000000000000000011,smackfsroot=bpf\x00,fsmagic=0x0000000000000003,appraise,fsname=syz\x00,obj_user=fowne']) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000600), 0x1000, &(0x7f00000007c0)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x81}}, {@cachetag={'cachetag', 0x3d, 'fsname'}}, {@privport}, {@access_client}, {@uname={'uname', 0x3d, 'fsname'}}]}}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x212000, &(0x7f0000000380)={'trans=unix,', {[{@cache_none}, {@mmap}], [{@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', r2}}]}}) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x800) readlink(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)=""/96, 0x60) syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='.\x00', 0x810000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,uid>', @ANYRESDEC=r2, @ANYBLOB='Cfowner=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365723d7b2b29282dad65242c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r2, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',fsuuid=f\x008065f5-6c62-7f13-2e46-4adc97df,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000ac0)="cb5ffdcf1a95edcd051e46e1908871b4bc007b85851c681942a0582574ae7060a2dca9586dbfcc3ed0d7cd50b43923bf2c44cf8a6b1cd8c3f142") readlinkat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=""/4090, 0xffa) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xb9b6}}], [{@euid_eq={'euid', 0x3d, r2}}]}) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x301000, &(0x7f0000000180)={'trans=xen,', {[{@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x3440, &(0x7f0000000480)=ANY=[@ANYBLOB='mode=00000000000000000007777,mode=00000000000000000000037,mode=00000000000000000000001,mode=01777777777777777777777,mode=00000000000000Fs~000000001,mode=00000000000000000010000,mode=00000000000000000000011,smackfsroot=bpf\x00,fsmagic=0x0000000000000003,appraise,fsname=syz\x00,obj_user=fowne']) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000740), 0x6000) (async) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000600), 0x1000, &(0x7f00000007c0)={'trans=unix,', {[{@cache_fscache}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@debug={'debug', 0x3d, 0x81}}, {@cachetag={'cachetag', 0x3d, 'fsname'}}, {@privport}, {@access_client}, {@uname={'uname', 0x3d, 'fsname'}}]}}) (async) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) (async) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x212000, &(0x7f0000000380)={'trans=unix,', {[{@cache_none}, {@mmap}], [{@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', r2}}]}}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80), 0x800) (async) readlink(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)=""/96, 0x60) (async) syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='.\x00', 0x810000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,uid>', @ANYRESDEC=r2, @ANYBLOB='Cfowner=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f757365723d7b2b29282dad65242c646f6e745f61707072616973652c657569643d", @ANYRESDEC=r2, @ANYBLOB=',uid>', @ANYRESDEC=r2, @ANYBLOB=',fsuuid=f\x008065f5-6c62-7f13-2e46-4adc97df,fowner=', @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=r2, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000ac0)="cb5ffdcf1a95edcd051e46e1908871b4bc007b85851c681942a0582574ae7060a2dca9586dbfcc3ed0d7cd50b43923bf2c44cf8a6b1cd8c3f142") (async) readlinkat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)=""/4090, 0xffa) (async) mount$bpf(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000080), 0x400, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x101}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xb9b6}}], [{@euid_eq={'euid', 0x3d, r2}}]}) (async) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x301000, &(0x7f0000000180)={'trans=xen,', {[{@loose}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}]}}) (async) 01:37:05 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0xee01) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x581800, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '[.'}, {}], 0xa, "a544a31ae4a6d55fccd5a2b7caa842b4724a1f6c172a0aae49b476bcdfb79534d01d860c9c9d59a2d2b0d8db37b3463ce64b1239f9c95e5d291a1fb733140af62a0256bc602d49e906f3b990013f4b29f7a1268b7f63d5909d36aa26dcdd078015d0af4c90388361e03b5803c8267dc795"}, 0x81) 01:37:05 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000080)) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x200, &(0x7f0000000080)) (async) 01:37:05 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1765.351082][T22794] fuse: Bad value for 'fd' [ 1765.366637][T22789] nfs4: Bad value for 'source' 01:37:05 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7731}}, './file1\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r4, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x26c04, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x4e000}}, {}, {@mode={'mode', 0x3d, 0xe000000000000}}, {@mode={'mode', 0x3d, 0x2c3}}, {@mode={'mode', 0x3d, 0xad3}}, {}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, ':}{.[M$.*(\\'}}, {@euid_gt={'euid>', r4}}, {@fsname={'fsname', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}]}) fchownat(r1, &(0x7f0000000740)='./file0\x00', r4, r3, 0x400) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x188) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000500)='./file1/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000280)='./file1/file1\x00', &(0x7f00000002c0), 0x804050, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xfb90}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x8001}}], [{@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'audit'}}, {@fowner_lt={'fowner<', r5}}]}) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=""/182, 0xb6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1/file0\x00'}) 01:37:05 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee00) open(&(0x7f0000000000)='./file0\x00', 0x492443, 0x153) 01:37:06 executing program 1: io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000180)={[{'\x00v'}, {'\x01\x00*%-Y'}], [{@smackfsroot={'smackfsroot', 0x3d, '\',:-'}}, {@seclabel}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x7) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f0000000180)={[{'\x00v'}, {'\x01\x00*%-Y'}], [{@smackfsroot={'smackfsroot', 0x3d, '\',:-'}}, {@seclabel}]}) (async) 01:37:06 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:06 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xd0}}, './file0/file0\x00'}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0/file0\x00', 0x1) 01:37:06 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181880, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000022c0)={0x10, 0xffffffffffffffda, r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0x80, 0x45) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002300)={'bond_slave_0', 0x32, 0x39}, 0xf) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x20}, 0x20) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000002280), 0x414500, 0x12) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) lchown(&(0x7f0000000140)='./file1\x00', r3, 0xee00) mknodat(r2, &(0x7f00000024c0)='./file0\x00', 0x8010, 0x7) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r2, &(0x7f0000002480)=[{0xff, 0x3e, 0x9, 0x8, @tick=0x2, {0x6, 0xff}, {0x4, 0x3}, @time=@time={0x58302e60, 0x1}}], 0x1c) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r4, &(0x7f0000002340)='./file1\x00', 0x400, 0x400, &(0x7f0000002380)) 01:37:06 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7731}}, './file1\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r4, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x26c04, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x4e000}}, {}, {@mode={'mode', 0x3d, 0xe000000000000}}, {@mode={'mode', 0x3d, 0x2c3}}, {@mode={'mode', 0x3d, 0xad3}}, {}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, ':}{.[M$.*(\\'}}, {@euid_gt={'euid>', r4}}, {@fsname={'fsname', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}]}) (async) fchownat(r1, &(0x7f0000000740)='./file0\x00', r4, r3, 0x400) (async) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x188) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000500)='./file1/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000280)='./file1/file1\x00', &(0x7f00000002c0), 0x804050, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xfb90}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x8001}}], [{@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'audit'}}, {@fowner_lt={'fowner<', r5}}]}) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=""/182, 0xb6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1/file0\x00'}) 01:37:06 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee00) (async) open(&(0x7f0000000000)='./file0\x00', 0x492443, 0x153) [ 1765.734995][T22813] nfs4: Bad value for 'source' 01:37:06 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lchown(&(0x7f0000000240)='./file0/file0/file0\x00', r0, 0xee01) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101080a, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@smackfsroot}]}}, 0x1, 0x0, &(0x7f0000000180)="210ce9a04c065e931b7a9a05244d7fa67ffadb89ec6a5c133ebb06d9e410a39d3a5aa12798d1510294b8950eea091121e3cfc6be05df67219cafdecc731e832db2048dacbfa9b49a9083221b73c3ba9319e39d6125c3a374ef8d7ad632899cadd63271347f82a4704eb87a739e4e5813f5240b4cd09aaa6259b5daaf1004cecc2b3913abe63928d0df34b30c38359574ba34c6bb85f782e33547d3486f57d3") [ 1765.766573][T22818] nfs4: Bad value for 'source' 01:37:06 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:06 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:06 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee00) open(&(0x7f0000000000)='./file0\x00', 0x492443, 0x153) 01:37:06 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) fcntl$getown(r0, 0x9) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) 01:37:06 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000240)='./file0/file0/file0\x00', r0, 0xee01) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101080a, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@smackfsroot}]}}, 0x1, 0x0, &(0x7f0000000180)="210ce9a04c065e931b7a9a05244d7fa67ffadb89ec6a5c133ebb06d9e410a39d3a5aa12798d1510294b8950eea091121e3cfc6be05df67219cafdecc731e832db2048dacbfa9b49a9083221b73c3ba9319e39d6125c3a374ef8d7ad632899cadd63271347f82a4704eb87a739e4e5813f5240b4cd09aaa6259b5daaf1004cecc2b3913abe63928d0df34b30c38359574ba34c6bb85f782e33547d3486f57d3") 01:37:06 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:06 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181880, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000022c0)={0x10, 0xffffffffffffffda, r0}, 0x10) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) r2 = openat(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0x80, 0x45) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002300)={'bond_slave_0', 0x32, 0x39}, 0xf) (async) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x20}, 0x20) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000002280), 0x414500, 0x12) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) lchown(&(0x7f0000000140)='./file1\x00', r3, 0xee00) (async) mknodat(r2, &(0x7f00000024c0)='./file0\x00', 0x8010, 0x7) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) write$sndseq(r2, &(0x7f0000002480)=[{0xff, 0x3e, 0x9, 0x8, @tick=0x2, {0x6, 0xff}, {0x4, 0x3}, @time=@time={0x58302e60, 0x1}}], 0x1c) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r4, &(0x7f0000002340)='./file1\x00', 0x400, 0x400, &(0x7f0000002380)) 01:37:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:06 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) fcntl$getown(r0, 0x9) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) 01:37:06 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7731}}, './file1\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r4, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x26c04, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x4e000}}, {}, {@mode={'mode', 0x3d, 0xe000000000000}}, {@mode={'mode', 0x3d, 0x2c3}}, {@mode={'mode', 0x3d, 0xad3}}, {}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r2}}, {@seclabel}, {@subj_role={'subj_role', 0x3d, ':}{.[M$.*(\\'}}, {@euid_gt={'euid>', r4}}, {@fsname={'fsname', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}]}) fchownat(r1, &(0x7f0000000740)='./file0\x00', r4, r3, 0x400) (async) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x188) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lstat(&(0x7f0000000500)='./file1/file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000280)='./file1/file1\x00', &(0x7f00000002c0), 0x804050, &(0x7f00000005c0)={[{@mode={'mode', 0x3d, 0xfb90}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x8001}}], [{@euid_eq={'euid', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'audit'}}, {@fowner_lt={'fowner<', r5}}]}) (async) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)=""/182, 0xb6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, r7, {0x7}}, './file1/file0\x00'}) 01:37:06 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:06 executing program 5: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) lchown(&(0x7f0000000240)='./file0/file0/file0\x00', r0, 0xee01) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101080a, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@smackfsroot}]}}, 0x1, 0x0, &(0x7f0000000180)="210ce9a04c065e931b7a9a05244d7fa67ffadb89ec6a5c133ebb06d9e410a39d3a5aa12798d1510294b8950eea091121e3cfc6be05df67219cafdecc731e832db2048dacbfa9b49a9083221b73c3ba9319e39d6125c3a374ef8d7ad632899cadd63271347f82a4704eb87a739e4e5813f5240b4cd09aaa6259b5daaf1004cecc2b3913abe63928d0df34b30c38359574ba34c6bb85f782e33547d3486f57d3") (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101080a, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}], [{@smackfsroot}]}}, 0x1, 0x0, &(0x7f0000000180)="210ce9a04c065e931b7a9a05244d7fa67ffadb89ec6a5c133ebb06d9e410a39d3a5aa12798d1510294b8950eea091121e3cfc6be05df67219cafdecc731e832db2048dacbfa9b49a9083221b73c3ba9319e39d6125c3a374ef8d7ad632899cadd63271347f82a4704eb87a739e4e5813f5240b4cd09aaa6259b5daaf1004cecc2b3913abe63928d0df34b30c38359574ba34c6bb85f782e33547d3486f57d3") 01:37:06 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) fcntl$getown(r0, 0x9) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, 0x0) 01:37:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:07 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x200, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:37:07 executing program 0: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181880, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000022c0)={0x10, 0xffffffffffffffda, r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000002240)='./file0\x00', 0x80, 0x45) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000002300)={'bond_slave_0', 0x32, 0x39}, 0xf) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f00000001c0)={0x20}, 0x20) openat$damon_target_ids(0xffffffffffffff9c, &(0x7f0000002280), 0x414500, 0x12) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1]) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r1]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) lchown(&(0x7f0000000140)='./file1\x00', r3, 0xee00) mknodat(r2, &(0x7f00000024c0)='./file0\x00', 0x8010, 0x7) (async) mknodat(r2, &(0x7f00000024c0)='./file0\x00', 0x8010, 0x7) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$sndseq(r2, &(0x7f0000002480)=[{0xff, 0x3e, 0x9, 0x8, @tick=0x2, {0x6, 0xff}, {0x4, 0x3}, @time=@time={0x58302e60, 0x1}}], 0x1c) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r4, &(0x7f0000002340)='./file1\x00', 0x400, 0x400, &(0x7f0000002380)) 01:37:07 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file0\x00') 01:37:07 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000017bc7a56c51831749a0f66cf27967da4aacb78a45f2932ed7da580e2410b738880cbd369483067cfa21746a7de9c874fbb34e3c131", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653100"]) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)=""/4096, 0x1000) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0/file0/file0'}], 0x1) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000001140)={'#! ', './file1', [{0x20, ']'}, {0x20, ' '}, {0x20, '!*'}, {0x20, '\n}@$'}, {}, {}, {0x20, ' '}], 0xa, "0b46ccc9687b7f2e977ed8aabe2c17e9af7844d54e97e5bd26bffd51d0f55bd83693e96bc5551d9ee7386689e3c1419e24c91943a3b7d4f676070c900141fbfc"}, 0x5b) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:07 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 01:37:07 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) mknod(&(0x7f00000023c0)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:07 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x200, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:37:07 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) chdir(&(0x7f0000000000)='./file0\x00') 01:37:07 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) 01:37:07 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000017bc7a56c51831749a0f66cf27967da4aacb78a45f2932ed7da580e2410b738880cbd369483067cfa21746a7de9c874fbb34e3c131", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653100"]) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)=""/4096, 0x1000) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0/file0/file0'}], 0x1) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000001140)={'#! ', './file1', [{0x20, ']'}, {0x20, ' '}, {0x20, '!*'}, {0x20, '\n}@$'}, {}, {}, {0x20, ' '}], 0xa, "0b46ccc9687b7f2e977ed8aabe2c17e9af7844d54e97e5bd26bffd51d0f55bd83693e96bc5551d9ee7386689e3c1419e24c91943a3b7d4f676070c900141fbfc"}, 0x5b) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000017bc7a56c51831749a0f66cf27967da4aacb78a45f2932ed7da580e2410b738880cbd369483067cfa21746a7de9c874fbb34e3c131", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653100"]) (async) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)=""/4096, 0x1000) (async) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0/file0/file0'}], 0x1) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000001140)={'#! ', './file1', [{0x20, ']'}, {0x20, ' '}, {0x20, '!*'}, {0x20, '\n}@$'}, {}, {}, {0x20, ' '}], 0xa, "0b46ccc9687b7f2e977ed8aabe2c17e9af7844d54e97e5bd26bffd51d0f55bd83693e96bc5551d9ee7386689e3c1419e24c91943a3b7d4f676070c900141fbfc"}, 0x5b) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:37:07 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x44342, 0x192) 01:37:07 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x400, 0x200, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, r1) 01:37:07 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file0\x00') 01:37:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00']) 01:37:07 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800000017bc7a56c51831749a0f66cf27967da4aacb78a45f2932ed7da580e2410b738880cbd369483067cfa21746a7de9c874fbb34e3c131", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653100"]) (async) readlink(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000140)=""/4096, 0x1000) write$damon_contexts(r0, &(0x7f0000000080)=[{' ', './file0/file0/file0'}], 0x1) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000001140)={'#! ', './file1', [{0x20, ']'}, {0x20, ' '}, {0x20, '!*'}, {0x20, '\n}@$'}, {}, {}, {0x20, ' '}], 0xa, "0b46ccc9687b7f2e977ed8aabe2c17e9af7844d54e97e5bd26bffd51d0f55bd83693e96bc5551d9ee7386689e3c1419e24c91943a3b7d4f676070c900141fbfc"}, 0x5b) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:07 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) 01:37:07 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x44342, 0x192) 01:37:07 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) 01:37:07 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/121, 0x79) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/172, 0xac) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$smackfs_label(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x152840, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/229, 0xe5) 01:37:07 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x38) chroot(&(0x7f0000000080)='./file0/file0\x00') statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f00000001c0)) 01:37:07 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"a3185c17ee0637a7d0b0e1fc0f40e322", 0x0, 0x0, {0x8, 0x80}, {0x9, 0x7f}, 0x25, [0x9, 0x8, 0x3, 0x8000000000000000, 0x100000000, 0xffffffffffffffff, 0x9, 0x2, 0x2, 0x3, 0x0, 0xecd5, 0x7ff, 0x2, 0x8000000000000000, 0x7fffffffffffffff]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"61fe0914e48f19e6b9891f87c3ab2b81", r2, r3, {0x6}, {0x4, 0xc8e74ea9}, 0x6, [0x10001, 0x8000, 0x2, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x6, 0xff, 0x893, 0x700000000000000, 0x0, 0x20, 0x0, 0x80, 0x8]}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x301000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000) [ 1767.455240][ T28] kauditd_printk_skb: 43756 callbacks suppressed [ 1767.455258][ T28] audit: type=1400 audit(1697852227.874:2934683): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=4482 comm="udevd" path="/sys/devices/virtual/block/loop3/mq/0/cpu0" dev="sysfs" ino=14858 [ 1767.486998][T22925] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1767.491546][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 01:37:08 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x44342, 0x192) [ 1767.495710][T22916] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1767.505346][ T4482] audit: audit_lost=1016986 audit_rate_limit=0 audit_backlog_limit=64 [ 1767.515005][T22922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1767.515025][T22922] audit: audit_lost=1016987 audit_rate_limit=0 audit_backlog_limit=64 [ 1767.515043][T22922] audit: backlog limit exceeded [ 1767.515070][T22922] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1767.527239][T22926] audit: audit_backlog=65 > audit_backlog_limit=64 01:37:08 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/121, 0x79) (async) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/172, 0xac) (async, rerun: 64) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async, rerun: 64) write$smackfs_label(r0, 0x0, 0x0) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x152840, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) (rerun: 32) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/229, 0xe5) 01:37:08 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (rerun: 32) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x38) (async) chroot(&(0x7f0000000080)='./file0/file0\x00') (async) statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f00000001c0)) 01:37:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00']) 01:37:08 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) 01:37:08 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"a3185c17ee0637a7d0b0e1fc0f40e322", 0x0, 0x0, {0x8, 0x80}, {0x9, 0x7f}, 0x25, [0x9, 0x8, 0x3, 0x8000000000000000, 0x100000000, 0xffffffffffffffff, 0x9, 0x2, 0x2, 0x3, 0x0, 0xecd5, 0x7ff, 0x2, 0x8000000000000000, 0x7fffffffffffffff]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"61fe0914e48f19e6b9891f87c3ab2b81", r2, r3, {0x6}, {0x4, 0xc8e74ea9}, 0x6, [0x10001, 0x8000, 0x2, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x6, 0xff, 0x893, 0x700000000000000, 0x0, 0x20, 0x0, 0x80, 0x8]}) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x301000, 0x1) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000) 01:37:08 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x90) 01:37:08 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/file0\x00', 0x38) chroot(&(0x7f0000000080)='./file0/file0\x00') statx(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7ff, &(0x7f00000001c0)) 01:37:08 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, 0x0) (async) 01:37:08 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"a3185c17ee0637a7d0b0e1fc0f40e322", 0x0, 0x0, {0x8, 0x80}, {0x9, 0x7f}, 0x25, [0x9, 0x8, 0x3, 0x8000000000000000, 0x100000000, 0xffffffffffffffff, 0x9, 0x2, 0x2, 0x3, 0x0, 0xecd5, 0x7ff, 0x2, 0x8000000000000000, 0x7fffffffffffffff]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"61fe0914e48f19e6b9891f87c3ab2b81", r2, r3, {0x6}, {0x4, 0xc8e74ea9}, 0x6, [0x10001, 0x8000, 0x2, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x6, 0xff, 0x893, 0x700000000000000, 0x0, 0x20, 0x0, 0x80, 0x8]}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x301000, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) (async) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"a3185c17ee0637a7d0b0e1fc0f40e322", 0x0, 0x0, {0x8, 0x80}, {0x9, 0x7f}, 0x25, [0x9, 0x8, 0x3, 0x8000000000000000, 0x100000000, 0xffffffffffffffff, 0x9, 0x2, 0x2, 0x3, 0x0, 0xecd5, 0x7ff, 0x2, 0x8000000000000000, 0x7fffffffffffffff]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"61fe0914e48f19e6b9891f87c3ab2b81", r2, r3, {0x6}, {0x4, 0xc8e74ea9}, 0x6, [0x10001, 0x8000, 0x2, 0xfffffffffffffff7, 0x3, 0x8, 0x4, 0x6, 0xff, 0x893, 0x700000000000000, 0x0, 0x20, 0x0, 0x80, 0x8]}) (async) openat(r1, &(0x7f0000000040)='./file0\x00', 0x301000, 0x1) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000) (async) 01:37:08 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x90) 01:37:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00\x00\x00']) 01:37:08 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/121, 0x79) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/172, 0xac) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) write$smackfs_label(r0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x152840, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/229, 0xe5) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/121, 0x79) (async) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/172, 0xac) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x48080, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) write$smackfs_label(r0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x152840, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0]) (async) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/229, 0xe5) (async) 01:37:08 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x4) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') write$damon_contexts(0xffffffffffffffff, &(0x7f0000000380)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0/file0'}], 0x7) r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x17b) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01442c080000000000000000", @ANYRES32=r0, @ANYBLOB="01040000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001001f0018006d4c4c4088b4c1caaa940c0000e5918b9fabbf471146e421abe35884c5ed864fdeb7cc1331a850cc87e1f93a59ae2e6530e92864f67801e3814f9c41a68455d4f015d06a67e66cbadc616413a9015ab1e0e292f464899a2dd55a610c827eb1cea09de84110b4adcefe83bc2dc49291e7a2da95b90400008981f741bcbd1e9cc7f26b9c0079a30ec511985868d74e8248bb6f57f76b4ac81b9fb6ea500158d65420958d693d1fb3d9e91ff463371df8df4e054efde7650e", @ANYRES32=r0, @ANYBLOB="00040000000000002e2f66696c653000"]) mknodat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x800, 0x8) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 01:37:08 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x90) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x90) 01:37:08 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40000005}) openat$cgroup_pressure(r0, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) write$qrtrtun(r0, &(0x7f0000000080)="96bf03771a0b1cd1e406c5c7e1d0d13f059a04c0f429cf253a1ea82fd8f085f2b609560000000000000000000000000000e0adcc8bf5ef454fbbdbec581e31a91b235d4b6a15ea829b569c4dfe6657b5484f0fb2b65cbd77753f2c7f993ccb4ad7d51c428a43c05c0483de32c89057ae", 0x70) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67bfc09134f25a19, 0x0) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000240)={{0x0, 0x16a840000000, 0x8001, 0xcc2, 0x1f, 0x1000, 0x8, 0x9, 0x5, 0xb53, 0x9, 0x9, 0x0, 0x1f, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) 01:37:08 executing program 1: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0x18) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x5) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:08 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc3c0, 0x40) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x84000, 0x4b) write$smackfs_logging(r1, &(0x7f0000000380)=0x2, 0x14) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030302030303030303010303030311f000000302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303030302c616c6c6f775f6f746865722c626c6b73d482beb0a002affa30303030303030303030303430302c6d61785f726561643d3078303030303030303030303030303166662c626c6b73697a653d3078303030303030303030304b30313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c6d61736b3d4d41595f455845432c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,euid>', @ANYRESHEX=r1, @ANYBLOB="2c646f6e745f686173682c7365636c6162656c2c6f626a5f757365723d2c636f6e746578743d73797361646d5f752c736d61636b66736465663d26162f285c2b215e5b212c00"], 0x0, 0x0, &(0x7f00000002c0)="f9f4ba63d9f7e5cd6181b928c34ae1683f4efafe7e26b9f9a030563761aec68bf3b446bcaf3902c1205c9f00652fd1d6b25d7d16e14bab7dcdd2cd98855bf4dd7d924a00e2ccdd6f76787d79e2e530c575b9ad9a3af97413e5b9771f5cb49db85989e0e0053d5e7d2561bb13ca1f988519372e3409bb52e6bf4b35d07b7992") mkdir(&(0x7f0000000440)='./file0/file0\x00', 0xc0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2280, 0x0) mknodat$null(r2, &(0x7f0000000400)='./file0\x00', 0xb00, 0x103) 01:37:08 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000500)={0x468, 0x0, 0x0, [{{0x5, 0x0, 0x0, 0x7, 0x1, 0x0, {0x6, 0x8, 0x8, 0x1ff, 0x5, 0x7fffffffffffffff, 0x400, 0x5, 0x5, 0x6000, 0x0, 0x0, r1, 0x800, 0x80}}, {0x0, 0xe1b3, 0x4, 0x1f, 'bpf\x00'}}, {{0x4, 0x0, 0x7, 0x0, 0x1f, 0x1, {0x3, 0x7fff, 0x0, 0x2, 0x3ff, 0x7, 0x1ff, 0x9, 0x7, 0xa000, 0x879, 0xffffffffffffffff, r2, 0x7, 0x5}}, {0x0, 0x7ff, 0x4, 0x0, 'bpf\x00'}}, {{0x4, 0x3, 0x2, 0x3, 0xffff, 0x4, {0x6, 0x0, 0x9, 0xffffffff, 0xff, 0xb, 0x8000, 0x6, 0x1ff, 0xc000, 0xfffffffc, 0xffffffffffffffff, r3, 0x1, 0x77}}, {0x0, 0x2, 0x4, 0x80, 'bpf\x00'}}, {{0x3, 0x2, 0x1ff, 0x1, 0xbbf1, 0x101, {0x3, 0xfffffffffffffffd, 0x25f8, 0x200, 0x0, 0x1, 0x4, 0x81, 0x80000000, 0x1000, 0x4, r4, 0x0, 0x6, 0xfff000}}, {0x0, 0xecd1, 0x2, 0x3ff, 'ro'}}, {{0x1, 0x1, 0x3f, 0xffffffff, 0x8, 0x2, {0x5, 0xff, 0x9, 0xda, 0x8000000000000000, 0x7, 0x5, 0x1, 0x1, 0xc000, 0x1, 0xee00, 0x0, 0x2, 0x8}}, {0x5, 0xdc, 0x8, 0x9, '!]@m.(+^'}}, {{0x6, 0x1, 0x1000, 0x9, 0x1aa29b79, 0x1, {0x1, 0x774, 0x7ea0, 0x395e, 0x2, 0x7f, 0x0, 0x100000, 0x7a, 0x4000, 0x1, r5, 0xffffffffffffffff, 0x5}}, {0x3, 0x8001, 0x2, 0x7fff, 'ro'}}, {{0x3, 0x1, 0x7, 0x5, 0x0, 0x80000001, {0x4, 0x7, 0x72, 0x9, 0x3f, 0x10000, 0x0, 0x3, 0x2, 0xc000, 0x25, r6, 0xffffffffffffffff, 0x1ff, 0x3}}, {0x4, 0x21a6fdf9, 0x0, 0x3f}}]}, 0x468) 01:37:08 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x4) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') write$damon_contexts(0xffffffffffffffff, &(0x7f0000000380)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0/file0'}], 0x7) r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x17b) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01442c080000000000000000", @ANYRES32=r0, @ANYBLOB="01040000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001001f0018006d4c4c4088b4c1caaa940c0000e5918b9fabbf471146e421abe35884c5ed864fdeb7cc1331a850cc87e1f93a59ae2e6530e92864f67801e3814f9c41a68455d4f015d06a67e66cbadc616413a9015ab1e0e292f464899a2dd55a610c827eb1cea09de84110b4adcefe83bc2dc49291e7a2da95b90400008981f741bcbd1e9cc7f26b9c0079a30ec511985868d74e8248bb6f57f76b4ac81b9fb6ea500158d65420958d693d1fb3d9e91ff463371df8df4e054efde7650e", @ANYRES32=r0, @ANYBLOB="00040000000000002e2f66696c653000"]) mknodat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x800, 0x8) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x4) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000380)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0/file0'}], 0x7) (async) open(&(0x7f0000000000)='.\x00', 0x10000, 0x17b) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01442c080000000000000000", @ANYRES32=r0, @ANYBLOB="01040000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001001f0018006d4c4c4088b4c1caaa940c0000e5918b9fabbf471146e421abe35884c5ed864fdeb7cc1331a850cc87e1f93a59ae2e6530e92864f67801e3814f9c41a68455d4f015d06a67e66cbadc616413a9015ab1e0e292f464899a2dd55a610c827eb1cea09de84110b4adcefe83bc2dc49291e7a2da95b90400008981f741bcbd1e9cc7f26b9c0079a30ec511985868d74e8248bb6f57f76b4ac81b9fb6ea500158d65420958d693d1fb3d9e91ff463371df8df4e054efde7650e", @ANYRES32=r0, @ANYBLOB="00040000000000002e2f66696c653000"]) (async) mknodat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x800, 0x8) (async) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') (async) [ 1768.383224][ T5062] Bluetooth: hci3: command 0x0406 tx timeout 01:37:08 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40000005}) openat$cgroup_pressure(r0, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) (async) write$qrtrtun(r0, &(0x7f0000000080)="96bf03771a0b1cd1e406c5c7e1d0d13f059a04c0f429cf253a1ea82fd8f085f2b609560000000000000000000000000000e0adcc8bf5ef454fbbdbec581e31a91b235d4b6a15ea829b569c4dfe6657b5484f0fb2b65cbd77753f2c7f993ccb4ad7d51c428a43c05c0483de32c89057ae", 0x70) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67bfc09134f25a19, 0x0) (async) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000240)={{0x0, 0x16a840000000, 0x8001, 0xcc2, 0x1f, 0x1000, 0x8, 0x9, 0x5, 0xb53, 0x9, 0x9, 0x0, 0x1f, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) 01:37:08 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '--}!-/%*]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor}, {@permit_directio}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="7655cb") r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file1', [{0x20, 'fuse\x00'}, {0x20, 'permit_directio'}, {0x20, '--}!-/%*]'}, {0x20, 'smackfsroot'}, {0x20, '!'}, {}], 0xa, "a5872c3069e975e0ddca20f1360f319f8f8243ed6d34e630ab763481c136fc548f5beb939b8320e4f5e94a55b9da0cdb14cdf750d835276b691c512bb926c5a1d3f3afb25c5a8bd1dce8ab8fd2ef25699c40cb951cdb29b805d325bda9c0c1be93d75f07cc96736033fbd68bb34533e5022bf36c06b5f305dce8a1c748236cb2b5e6a6831fadf2897eddb84a19c6dd6e655c76c3995e4dc9a47daad020da6486c74b56f356cf61338e6bf63f1a14cac13b8c3fe1efce3b3c272dea6d96ceb06eef35a5fd90282fe4c5e14d9a51d17400d0dc10cfec539e83978d85ec3d123d8f2e63b427eda9fd90b8812c"}, 0x125) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@filename='./file0\x00', 0xee00, 0x0) 01:37:08 executing program 1: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0x18) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x5) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1768.534849][T22991] fuse: Bad value for 'fd' 01:37:09 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc3c0, 0x40) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x84000, 0x4b) write$smackfs_logging(r1, &(0x7f0000000380)=0x2, 0x14) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030302030303030303010303030311f000000302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303030302c616c6c6f775f6f746865722c626c6b73d482beb0a002affa30303030303030303030303430302c6d61785f726561643d3078303030303030303030303030303166662c626c6b73697a653d3078303030303030303030304b30313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c6d61736b3d4d41595f455845432c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,euid>', @ANYRESHEX=r1, @ANYBLOB="2c646f6e745f686173682c7365636c6162656c2c6f626a5f757365723d2c636f6e746578743d73797361646d5f752c736d61636b66736465663d26162f285c2b215e5b212c00"], 0x0, 0x0, &(0x7f00000002c0)="f9f4ba63d9f7e5cd6181b928c34ae1683f4efafe7e26b9f9a030563761aec68bf3b446bcaf3902c1205c9f00652fd1d6b25d7d16e14bab7dcdd2cd98855bf4dd7d924a00e2ccdd6f76787d79e2e530c575b9ad9a3af97413e5b9771f5cb49db85989e0e0053d5e7d2561bb13ca1f988519372e3409bb52e6bf4b35d07b7992") mkdir(&(0x7f0000000440)='./file0/file0\x00', 0xc0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2280, 0x0) mknodat$null(r2, &(0x7f0000000400)='./file0\x00', 0xb00, 0x103) 01:37:09 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x4) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000280)='./file0\x00') (async) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000380)=[{' ', './file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0/file0'}, {' ', './file0'}, {' ', './file0'}, {' ', './file0/file0'}], 0x7) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x17b) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01442c080000000000000000", @ANYRES32=r0, @ANYBLOB="01040000000000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000001001f0018006d4c4c4088b4c1caaa940c0000e5918b9fabbf471146e421abe35884c5ed864fdeb7cc1331a850cc87e1f93a59ae2e6530e92864f67801e3814f9c41a68455d4f015d06a67e66cbadc616413a9015ab1e0e292f464899a2dd55a610c827eb1cea09de84110b4adcefe83bc2dc49291e7a2da95b90400008981f741bcbd1e9cc7f26b9c0079a30ec511985868d74e8248bb6f57f76b4ac81b9fb6ea500158d65420958d693d1fb3d9e91ff463371df8df4e054efde7650e", @ANYRES32=r0, @ANYBLOB="00040000000000002e2f66696c653000"]) (async) mknodat(r0, &(0x7f0000000240)='./file0/file0\x00', 0x800, 0x8) (async) stat(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 01:37:09 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40000005}) openat$cgroup_pressure(r0, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) write$qrtrtun(r0, &(0x7f0000000080)="96bf03771a0b1cd1e406c5c7e1d0d13f059a04c0f429cf253a1ea82fd8f085f2b609560000000000000000000000000000e0adcc8bf5ef454fbbdbec581e31a91b235d4b6a15ea829b569c4dfe6657b5484f0fb2b65cbd77753f2c7f993ccb4ad7d51c428a43c05c0483de32c89057ae", 0x70) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67bfc09134f25a19, 0x0) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000240)={{0x0, 0x16a840000000, 0x8001, 0xcc2, 0x1f, 0x1000, 0x8, 0x9, 0x5, 0xb53, 0x9, 0x9, 0x0, 0x1f, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x40000005}) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='cpu.pressure\x00', 0x2, 0x0) (async) write$qrtrtun(r0, &(0x7f0000000080)="96bf03771a0b1cd1e406c5c7e1d0d13f059a04c0f429cf253a1ea82fd8f085f2b609560000000000000000000000000000e0adcc8bf5ef454fbbdbec581e31a91b235d4b6a15ea829b569c4dfe6657b5484f0fb2b65cbd77753f2c7f993ccb4ad7d51c428a43c05c0483de32c89057ae", 0x70) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x67bfc09134f25a19, 0x0) (async) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000240)={{0x0, 0x16a840000000, 0x8001, 0xcc2, 0x1f, 0x1000, 0x8, 0x9, 0x5, 0xb53, 0x9, 0x9, 0x0, 0x1f, 0x9}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) (async) 01:37:09 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '--}!-/%*]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor}, {@permit_directio}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="7655cb") r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file1', [{0x20, 'fuse\x00'}, {0x20, 'permit_directio'}, {0x20, '--}!-/%*]'}, {0x20, 'smackfsroot'}, {0x20, '!'}, {}], 0xa, "a5872c3069e975e0ddca20f1360f319f8f8243ed6d34e630ab763481c136fc548f5beb939b8320e4f5e94a55b9da0cdb14cdf750d835276b691c512bb926c5a1d3f3afb25c5a8bd1dce8ab8fd2ef25699c40cb951cdb29b805d325bda9c0c1be93d75f07cc96736033fbd68bb34533e5022bf36c06b5f305dce8a1c748236cb2b5e6a6831fadf2897eddb84a19c6dd6e655c76c3995e4dc9a47daad020da6486c74b56f356cf61338e6bf63f1a14cac13b8c3fe1efce3b3c272dea6d96ceb06eef35a5fd90282fe4c5e14d9a51d17400d0dc10cfec539e83978d85ec3d123d8f2e63b427eda9fd90b8812c"}, 0x125) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@filename='./file0\x00', 0xee00, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '--}!-/%*]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor}, {@permit_directio}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="7655cb") (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file1', [{0x20, 'fuse\x00'}, {0x20, 'permit_directio'}, {0x20, '--}!-/%*]'}, {0x20, 'smackfsroot'}, {0x20, '!'}, {}], 0xa, "a5872c3069e975e0ddca20f1360f319f8f8243ed6d34e630ab763481c136fc548f5beb939b8320e4f5e94a55b9da0cdb14cdf750d835276b691c512bb926c5a1d3f3afb25c5a8bd1dce8ab8fd2ef25699c40cb951cdb29b805d325bda9c0c1be93d75f07cc96736033fbd68bb34533e5022bf36c06b5f305dce8a1c748236cb2b5e6a6831fadf2897eddb84a19c6dd6e655c76c3995e4dc9a47daad020da6486c74b56f356cf61338e6bf63f1a14cac13b8c3fe1efce3b3c272dea6d96ceb06eef35a5fd90282fe4c5e14d9a51d17400d0dc10cfec539e83978d85ec3d123d8f2e63b427eda9fd90b8812c"}, 0x125) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@filename='./file0\x00', 0xee00, 0x0) (async) 01:37:09 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) (async) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000500)={0x468, 0x0, 0x0, [{{0x5, 0x0, 0x0, 0x7, 0x1, 0x0, {0x6, 0x8, 0x8, 0x1ff, 0x5, 0x7fffffffffffffff, 0x400, 0x5, 0x5, 0x6000, 0x0, 0x0, r1, 0x800, 0x80}}, {0x0, 0xe1b3, 0x4, 0x1f, 'bpf\x00'}}, {{0x4, 0x0, 0x7, 0x0, 0x1f, 0x1, {0x3, 0x7fff, 0x0, 0x2, 0x3ff, 0x7, 0x1ff, 0x9, 0x7, 0xa000, 0x879, 0xffffffffffffffff, r2, 0x7, 0x5}}, {0x0, 0x7ff, 0x4, 0x0, 'bpf\x00'}}, {{0x4, 0x3, 0x2, 0x3, 0xffff, 0x4, {0x6, 0x0, 0x9, 0xffffffff, 0xff, 0xb, 0x8000, 0x6, 0x1ff, 0xc000, 0xfffffffc, 0xffffffffffffffff, r3, 0x1, 0x77}}, {0x0, 0x2, 0x4, 0x80, 'bpf\x00'}}, {{0x3, 0x2, 0x1ff, 0x1, 0xbbf1, 0x101, {0x3, 0xfffffffffffffffd, 0x25f8, 0x200, 0x0, 0x1, 0x4, 0x81, 0x80000000, 0x1000, 0x4, r4, 0x0, 0x6, 0xfff000}}, {0x0, 0xecd1, 0x2, 0x3ff, 'ro'}}, {{0x1, 0x1, 0x3f, 0xffffffff, 0x8, 0x2, {0x5, 0xff, 0x9, 0xda, 0x8000000000000000, 0x7, 0x5, 0x1, 0x1, 0xc000, 0x1, 0xee00, 0x0, 0x2, 0x8}}, {0x5, 0xdc, 0x8, 0x9, '!]@m.(+^'}}, {{0x6, 0x1, 0x1000, 0x9, 0x1aa29b79, 0x1, {0x1, 0x774, 0x7ea0, 0x395e, 0x2, 0x7f, 0x0, 0x100000, 0x7a, 0x4000, 0x1, r5, 0xffffffffffffffff, 0x5}}, {0x3, 0x8001, 0x2, 0x7fff, 'ro'}}, {{0x3, 0x1, 0x7, 0x5, 0x0, 0x80000001, {0x4, 0x7, 0x72, 0x9, 0x3f, 0x10000, 0x0, 0x3, 0x2, 0xc000, 0x25, r6, 0xffffffffffffffff, 0x1ff, 0x3}}, {0x4, 0x21a6fdf9, 0x0, 0x3f}}]}, 0x468) 01:37:09 executing program 1: write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xffffffffffffffff}}, 0x18) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x5) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1768.814811][T23006] fuse: Bad value for 'fd' 01:37:09 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc3c0, 0x40) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0/file0\x00', 0x84000, 0x4b) write$smackfs_logging(r1, &(0x7f0000000380)=0x2, 0x14) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030302030303030303010303030311f000000302c757365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303030302c616c6c6f775f6f746865722c626c6b73d482beb0a002affa30303030303030303030303430302c6d61785f726561643d3078303030303030303030303030303166662c626c6b73697a653d3078303030303030303030304b30313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c6d61736b3d4d41595f455845432c666f776e65723d", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,euid>', @ANYRESHEX=r1, @ANYBLOB="2c646f6e745f686173682c7365636c6162656c2c6f626a5f757365723d2c636f6e746578743d73797361646d5f752c736d61636b66736465663d26162f285c2b215e5b212c00"], 0x0, 0x0, &(0x7f00000002c0)="f9f4ba63d9f7e5cd6181b928c34ae1683f4efafe7e26b9f9a030563761aec68bf3b446bcaf3902c1205c9f00652fd1d6b25d7d16e14bab7dcdd2cd98855bf4dd7d924a00e2ccdd6f76787d79e2e530c575b9ad9a3af97413e5b9771f5cb49db85989e0e0053d5e7d2561bb13ca1f988519372e3409bb52e6bf4b35d07b7992") (async) mkdir(&(0x7f0000000440)='./file0/file0\x00', 0xc0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x2280, 0x0) mknodat$null(r2, &(0x7f0000000400)='./file0\x00', 0xb00, 0x103) 01:37:09 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:09 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0xc0002001}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:09 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) write$smackfs_change_rule(r1, &(0x7f0000000080)={'\'$$\xda', 0x20, ')&)9\\', 0x20, 'ral', 0x20, 'rwatb'}, 0x15) 01:37:09 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000380)) (async) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x800, 0x40, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r6, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000500)={0x468, 0x0, 0x0, [{{0x5, 0x0, 0x0, 0x7, 0x1, 0x0, {0x6, 0x8, 0x8, 0x1ff, 0x5, 0x7fffffffffffffff, 0x400, 0x5, 0x5, 0x6000, 0x0, 0x0, r1, 0x800, 0x80}}, {0x0, 0xe1b3, 0x4, 0x1f, 'bpf\x00'}}, {{0x4, 0x0, 0x7, 0x0, 0x1f, 0x1, {0x3, 0x7fff, 0x0, 0x2, 0x3ff, 0x7, 0x1ff, 0x9, 0x7, 0xa000, 0x879, 0xffffffffffffffff, r2, 0x7, 0x5}}, {0x0, 0x7ff, 0x4, 0x0, 'bpf\x00'}}, {{0x4, 0x3, 0x2, 0x3, 0xffff, 0x4, {0x6, 0x0, 0x9, 0xffffffff, 0xff, 0xb, 0x8000, 0x6, 0x1ff, 0xc000, 0xfffffffc, 0xffffffffffffffff, r3, 0x1, 0x77}}, {0x0, 0x2, 0x4, 0x80, 'bpf\x00'}}, {{0x3, 0x2, 0x1ff, 0x1, 0xbbf1, 0x101, {0x3, 0xfffffffffffffffd, 0x25f8, 0x200, 0x0, 0x1, 0x4, 0x81, 0x80000000, 0x1000, 0x4, r4, 0x0, 0x6, 0xfff000}}, {0x0, 0xecd1, 0x2, 0x3ff, 'ro'}}, {{0x1, 0x1, 0x3f, 0xffffffff, 0x8, 0x2, {0x5, 0xff, 0x9, 0xda, 0x8000000000000000, 0x7, 0x5, 0x1, 0x1, 0xc000, 0x1, 0xee00, 0x0, 0x2, 0x8}}, {0x5, 0xdc, 0x8, 0x9, '!]@m.(+^'}}, {{0x6, 0x1, 0x1000, 0x9, 0x1aa29b79, 0x1, {0x1, 0x774, 0x7ea0, 0x395e, 0x2, 0x7f, 0x0, 0x100000, 0x7a, 0x4000, 0x1, r5, 0xffffffffffffffff, 0x5}}, {0x3, 0x8001, 0x2, 0x7fff, 'ro'}}, {{0x3, 0x1, 0x7, 0x5, 0x0, 0x80000001, {0x4, 0x7, 0x72, 0x9, 0x3f, 0x10000, 0x0, 0x3, 0x2, 0xc000, 0x25, r6, 0xffffffffffffffff, 0x1ff, 0x3}}, {0x4, 0x21a6fdf9, 0x0, 0x3f}}]}, 0x468) 01:37:09 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x800808, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '--}!-/%*]'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fowner_gt={'fowner>', 0xee00}}, {@smackfsfloor}, {@permit_directio}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000200)="7655cb") (async, rerun: 32) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file1', [{0x20, 'fuse\x00'}, {0x20, 'permit_directio'}, {0x20, '--}!-/%*]'}, {0x20, 'smackfsroot'}, {0x20, '!'}, {}], 0xa, "a5872c3069e975e0ddca20f1360f319f8f8243ed6d34e630ab763481c136fc548f5beb939b8320e4f5e94a55b9da0cdb14cdf750d835276b691c512bb926c5a1d3f3afb25c5a8bd1dce8ab8fd2ef25699c40cb951cdb29b805d325bda9c0c1be93d75f07cc96736033fbd68bb34533e5022bf36c06b5f305dce8a1c748236cb2b5e6a6831fadf2897eddb84a19c6dd6e655c76c3995e4dc9a47daad020da6486c74b56f356cf61338e6bf63f1a14cac13b8c3fe1efce3b3c272dea6d96ceb06eef35a5fd90282fe4c5e14d9a51d17400d0dc10cfec539e83978d85ec3d123d8f2e63b427eda9fd90b8812c"}, 0x125) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (rerun: 32) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000240)=@filename='./file0\x00', 0xee00, 0x0) [ 1769.132918][T23035] fuse: Bad value for 'fd' 01:37:09 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x1) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:09 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0xc0002001}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (rerun: 64) 01:37:09 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) write$smackfs_change_rule(r1, &(0x7f0000000080)={'\'$$\xda', 0x20, ')&)9\\', 0x20, 'ral', 0x20, 'rwatb'}, 0x15) 01:37:09 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:09 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x1) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:09 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) write$smackfs_change_rule(r1, &(0x7f0000000080)={'\'$$\xda', 0x20, ')&)9\\', 0x20, 'ral', 0x20, 'rwatb'}, 0x15) 01:37:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x4182, &(0x7f0000000100)={0x0, 0xb8, 0x0, 0x0, 0x1be}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000280)={[], [{@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, '-'}, {0x20, '\x00'}], 0xa, "7370dfd468db61255f757bb4549555ea117f64cd884d01611873591a41c394691605037aa7930c2cb017f7b7cb0a4ff023235d2fa70ec7ff17cdbb6abb3a84f018df842ba2f838670f9f0f05198a3e1944707ee48bae7271632e67215a5c302c966604b994f38c250439b3fefe5b4091e1fb296072b5949889879f203e32f79a144fa439049d3a77cdb7e4eb691c4985dd9ababc13f4fd71a70c8694c80055e0caaf2db76b29b1732abd69f1a912f9792b228426a95e08c7a6b6a521880e92a6817dabc669a8ff9c8e42b7dd72ea526e840261660b116b6caa3a49140a28942433a0"}, 0xf2) 01:37:10 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0xc0002001}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000000)={0xc0002001}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:10 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 01:37:10 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x1) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0xfac) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:10 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x20, 0x800) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x5004, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d757365722c66736e616d653d212a28736d61636b6673666c6f6f723d2e2c6d61736b3d4d41595f57524954452c0041c2c58d2f6fcd5ae40427cfb9851dff5c0faeb5d92ff1139604a5ba7cc9e270e86d36c8c7585e3b8995054a8a6615266491de33f174d0b21a4629b01a30691cb20c4c"]) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = io_uring_setup(0x4182, &(0x7f0000000100)={0x0, 0xb8, 0x0, 0x0, 0x1be}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000280)={[], [{@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) (async) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, '-'}, {0x20, '\x00'}], 0xa, "7370dfd468db61255f757bb4549555ea117f64cd884d01611873591a41c394691605037aa7930c2cb017f7b7cb0a4ff023235d2fa70ec7ff17cdbb6abb3a84f018df842ba2f838670f9f0f05198a3e1944707ee48bae7271632e67215a5c302c966604b994f38c250439b3fefe5b4091e1fb296072b5949889879f203e32f79a144fa439049d3a77cdb7e4eb691c4985dd9ababc13f4fd71a70c8694c80055e0caaf2db76b29b1732abd69f1a912f9792b228426a95e08c7a6b6a521880e92a6817dabc669a8ff9c8e42b7dd72ea526e840261660b116b6caa3a49140a28942433a0"}, 0xf2) 01:37:10 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0x9) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%\xeb,'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '.)&'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}], 0xa, "4f3ce24db239403ec9765465a981e693a211b7f20efac99d18d008ed6b91"}, 0x5e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x18d000) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 01:37:10 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0xfac) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0xfac) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:37:10 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 01:37:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = io_uring_setup(0x4182, &(0x7f0000000100)={0x0, 0xb8, 0x0, 0x0, 0x1be}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000, &(0x7f0000000280)={[], [{@flag='ro'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) (async) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, '-'}, {0x20, '\x00'}], 0xa, "7370dfd468db61255f757bb4549555ea117f64cd884d01611873591a41c394691605037aa7930c2cb017f7b7cb0a4ff023235d2fa70ec7ff17cdbb6abb3a84f018df842ba2f838670f9f0f05198a3e1944707ee48bae7271632e67215a5c302c966604b994f38c250439b3fefe5b4091e1fb296072b5949889879f203e32f79a144fa439049d3a77cdb7e4eb691c4985dd9ababc13f4fd71a70c8694c80055e0caaf2db76b29b1732abd69f1a912f9792b228426a95e08c7a6b6a521880e92a6817dabc669a8ff9c8e42b7dd72ea526e840261660b116b6caa3a49140a28942433a0"}, 0xf2) 01:37:10 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x20, 0x800) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x5004, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d757365722c66736e616d653d212a28736d61636b6673666c6f6f723d2e2c6d61736b3d4d41595f57524954452c0041c2c58d2f6fcd5ae40427cfb9851dff5c0faeb5d92ff1139604a5ba7cc9e270e86d36c8c7585e3b8995054a8a6615266491de33f174d0b21a4629b01a30691cb20c4c"]) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0x9) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0x9) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%\xeb,'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '.)&'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}], 0xa, "4f3ce24db239403ec9765465a981e693a211b7f20efac99d18d008ed6b91"}, 0x5e) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x18d000) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1000) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 5: mknod(&(0x7f0000000040)='./file0/file0\x00', 0x8, 0xfac) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:10 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='lazytime'}]}) 01:37:10 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4001c2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xfff, &(0x7f0000000080)={[0x8000]}, 0x8) 01:37:10 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f0000000240)='./file0\x00', 0x20, 0x800) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x5004, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6163636573733d757365722c66736e616d653d212a28736d61636b6673666c6f6f723d2e2c6d61736b3d4d41595f57524954452c0041c2c58d2f6fcd5ae40427cfb9851dff5c0faeb5d92ff1139604a5ba7cc9e270e86d36c8c7585e3b8995054a8a6615266491de33f174d0b21a4629b01a30691cb20c4c"]) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x1, 0x9) (async) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%\xeb,'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '.)&'}, {0x20, '/dev/qrtr-tun\x00'}, {0x20, '/dev/qrtr-tun\x00'}], 0xa, "4f3ce24db239403ec9765465a981e693a211b7f20efac99d18d008ed6b91"}, 0x5e) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x18d000) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1000) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:10 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) fchownat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xee01, r2, 0x100) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = open(&(0x7f0000000180)='./file0/file0\x00', 0x80000, 0x40) write$yama_ptrace_scope(r3, &(0x7f00000001c0)='0\x00', 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000) 01:37:11 executing program 3: io_uring_setup(0x445, &(0x7f0000000000)={0x0, 0x2658, 0x80, 0x2, 0x23f}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x840, 0x140) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) write$sndseq(r0, &(0x7f00000002c0)=[{0x4, 0x3f, 0x81, 0x28, @tick=0x8001, {0x6, 0x3}, {0x80, 0x1}, @control={0x4, 0x0, 0x1}}, {0x4, 0x0, 0x80, 0x56, @tick=0x3d2c0000, {0x48, 0x7f}, {0x4, 0x4}, @time=@time={0x2, 0x39}}, {0x2, 0xfb, 0x1, 0x1, @tick=0x8, {0x20, 0x8}, {0x5, 0xab}, @result={0x8, 0x1}}, {0x7f, 0x3, 0x1, 0x1, @time={0x4a, 0xffffdb8d}, {0xff, 0xe0}, {0xff, 0x9}, @quote={{0x73, 0x66}, 0xe53, &(0x7f0000000100)={0x66, 0xfc, 0x7, 0x7f, @time={0x45, 0xfff}, {0x2, 0x16}, {0x40, 0x2}, @raw8={"58177988d06f55e020dce33b"}}}}, {0x4, 0xa6, 0x80, 0x3, @tick=0x425c, {0x7f}, {0x8, 0x7}, @control={0x8, 0x401, 0x4}}, {0x0, 0x8, 0x80, 0x6, @time={0x10000, 0x8001}, {0x5, 0x7}, {0x4, 0x21}, @note={0x1f, 0x9, 0x2c}}, {0x0, 0x80, 0x81, 0x3, @tick=0x1, {0xfe, 0x1f}, {0x1f, 0x1}, @raw8={"f0876cd68a9def288b4291c8"}}], 0xc4) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) write$smackfs_label(r0, &(0x7f0000000240)={'\''}, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) faccessat2(r0, &(0x7f0000000280)='./file0/file0\x00', 0x40, 0x200) 01:37:11 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x4001c2, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xfff, &(0x7f0000000080)={[0x8000]}, 0x8) 01:37:11 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='lazytime'}]}) 01:37:11 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) fchownat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xee01, r2, 0x100) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) r3 = open(&(0x7f0000000180)='./file0/file0\x00', 0x80000, 0x40) write$yama_ptrace_scope(r3, &(0x7f00000001c0)='0\x00', 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000) 01:37:11 executing program 3: io_uring_setup(0x445, &(0x7f0000000000)={0x0, 0x2658, 0x80, 0x2, 0x23f}) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x840, 0x140) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) write$sndseq(r0, &(0x7f00000002c0)=[{0x4, 0x3f, 0x81, 0x28, @tick=0x8001, {0x6, 0x3}, {0x80, 0x1}, @control={0x4, 0x0, 0x1}}, {0x4, 0x0, 0x80, 0x56, @tick=0x3d2c0000, {0x48, 0x7f}, {0x4, 0x4}, @time=@time={0x2, 0x39}}, {0x2, 0xfb, 0x1, 0x1, @tick=0x8, {0x20, 0x8}, {0x5, 0xab}, @result={0x8, 0x1}}, {0x7f, 0x3, 0x1, 0x1, @time={0x4a, 0xffffdb8d}, {0xff, 0xe0}, {0xff, 0x9}, @quote={{0x73, 0x66}, 0xe53, &(0x7f0000000100)={0x66, 0xfc, 0x7, 0x7f, @time={0x45, 0xfff}, {0x2, 0x16}, {0x40, 0x2}, @raw8={"58177988d06f55e020dce33b"}}}}, {0x4, 0xa6, 0x80, 0x3, @tick=0x425c, {0x7f}, {0x8, 0x7}, @control={0x8, 0x401, 0x4}}, {0x0, 0x8, 0x80, 0x6, @time={0x10000, 0x8001}, {0x5, 0x7}, {0x4, 0x21}, @note={0x1f, 0x9, 0x2c}}, {0x0, 0x80, 0x81, 0x3, @tick=0x1, {0xfe, 0x1f}, {0x1f, 0x1}, @raw8={"f0876cd68a9def288b4291c8"}}], 0xc4) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) write$smackfs_label(r0, &(0x7f0000000240)={'\''}, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) faccessat2(r0, &(0x7f0000000280)='./file0/file0\x00', 0x40, 0x200) io_uring_setup(0x445, &(0x7f0000000000)={0x0, 0x2658, 0x80, 0x2, 0x23f}) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x840, 0x140) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) (async) write$sndseq(r0, &(0x7f00000002c0)=[{0x4, 0x3f, 0x81, 0x28, @tick=0x8001, {0x6, 0x3}, {0x80, 0x1}, @control={0x4, 0x0, 0x1}}, {0x4, 0x0, 0x80, 0x56, @tick=0x3d2c0000, {0x48, 0x7f}, {0x4, 0x4}, @time=@time={0x2, 0x39}}, {0x2, 0xfb, 0x1, 0x1, @tick=0x8, {0x20, 0x8}, {0x5, 0xab}, @result={0x8, 0x1}}, {0x7f, 0x3, 0x1, 0x1, @time={0x4a, 0xffffdb8d}, {0xff, 0xe0}, {0xff, 0x9}, @quote={{0x73, 0x66}, 0xe53, &(0x7f0000000100)={0x66, 0xfc, 0x7, 0x7f, @time={0x45, 0xfff}, {0x2, 0x16}, {0x40, 0x2}, @raw8={"58177988d06f55e020dce33b"}}}}, {0x4, 0xa6, 0x80, 0x3, @tick=0x425c, {0x7f}, {0x8, 0x7}, @control={0x8, 0x401, 0x4}}, {0x0, 0x8, 0x80, 0x6, @time={0x10000, 0x8001}, {0x5, 0x7}, {0x4, 0x21}, @note={0x1f, 0x9, 0x2c}}, {0x0, 0x80, 0x81, 0x3, @tick=0x1, {0xfe, 0x1f}, {0x1f, 0x1}, @raw8={"f0876cd68a9def288b4291c8"}}], 0xc4) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) write$smackfs_label(r0, &(0x7f0000000240)={'\''}, 0x2) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) faccessat2(r0, &(0x7f0000000280)='./file0/file0\x00', 0x40, 0x200) (async) 01:37:11 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4001c2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xfff, &(0x7f0000000080)={[0x8000]}, 0x8) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x4001c2, 0x0) (async) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0xfff, &(0x7f0000000080)={[0x8000]}, 0x8) (async) 01:37:11 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:11 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) fchownat(r0, &(0x7f0000000040)='./file0/file0\x00', 0xee01, r2, 0x100) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = open(&(0x7f0000000180)='./file0/file0\x00', 0x80000, 0x40) write$yama_ptrace_scope(r3, &(0x7f00000001c0)='0\x00', 0x2) (async) write$yama_ptrace_scope(r3, &(0x7f00000001c0)='0\x00', 0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000) 01:37:11 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$nfs4(&(0x7f0000000480)='fsuuid', &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x18b7000, &(0x7f0000000540)={[{':&)'}, {}], [{@dont_appraise}]}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x400) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000140)='+{\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)={[{'/sys/fs/smackfs/revoke-subject\x00'}, {'/sys/fs/smackfs/revoke-subject\x00'}], [{@dont_hash}, {@uid_lt={'uid<', r3}}, {@euid_gt={'euid>', r0}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x3ed957626d47dab5, 0x35, 0x65, 0x33, 0x32, 0x57, 0x61], 0x2d, [0x38, 0x66, 0x30, 0x35], 0x2d, [0x31, 0x34, 0x62, 0x64], 0x2d, [0x30, 0x32, 0x0, 0x35], 0x2d, [0x36, 0x63, 0x35, 0x34, 0x52, 0x30, 0x37, 0x1]}}}, {@uid_lt}]}) 01:37:11 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:11 executing program 3: io_uring_setup(0x445, &(0x7f0000000000)={0x0, 0x2658, 0x80, 0x2, 0x23f}) (async) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x840, 0x140) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) write$sndseq(r0, &(0x7f00000002c0)=[{0x4, 0x3f, 0x81, 0x28, @tick=0x8001, {0x6, 0x3}, {0x80, 0x1}, @control={0x4, 0x0, 0x1}}, {0x4, 0x0, 0x80, 0x56, @tick=0x3d2c0000, {0x48, 0x7f}, {0x4, 0x4}, @time=@time={0x2, 0x39}}, {0x2, 0xfb, 0x1, 0x1, @tick=0x8, {0x20, 0x8}, {0x5, 0xab}, @result={0x8, 0x1}}, {0x7f, 0x3, 0x1, 0x1, @time={0x4a, 0xffffdb8d}, {0xff, 0xe0}, {0xff, 0x9}, @quote={{0x73, 0x66}, 0xe53, &(0x7f0000000100)={0x66, 0xfc, 0x7, 0x7f, @time={0x45, 0xfff}, {0x2, 0x16}, {0x40, 0x2}, @raw8={"58177988d06f55e020dce33b"}}}}, {0x4, 0xa6, 0x80, 0x3, @tick=0x425c, {0x7f}, {0x8, 0x7}, @control={0x8, 0x401, 0x4}}, {0x0, 0x8, 0x80, 0x6, @time={0x10000, 0x8001}, {0x5, 0x7}, {0x4, 0x21}, @note={0x1f, 0x9, 0x2c}}, {0x0, 0x80, 0x81, 0x3, @tick=0x1, {0xfe, 0x1f}, {0x1f, 0x1}, @raw8={"f0876cd68a9def288b4291c8"}}], 0xc4) (async, rerun: 64) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (rerun: 64) write$smackfs_label(r0, &(0x7f0000000240)={'\''}, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) faccessat2(r0, &(0x7f0000000280)='./file0/file0\x00', 0x40, 0x200) 01:37:11 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x40, &(0x7f0000000080)) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '#,'}, {}, {0x20, 'memory.pressure\x00'}], 0xa, "025cb6fd737f1a37aeca2911752125910488ba0a8ee03951048c55f7cf5f71cee3665cc287901333281eb5ccc485ee76c889662f3d570dcf35d07377cf5ed57317cdb9130bf4a30485899648514d7540d282e5ea60b5cc64d3f310951c51ee457f3c17a37cafce52e381b729893f4ca438de431a96f1e69ce471a7d055e081d0f05e176d453428443fd0fbbb68d23075855df261d84403473b4a9d0751b26f9c6891c39767ddf8ae11907f"}, 0x113) 01:37:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[], [{@flag='lazytime'}]}) [ 1771.429765][T23162] nfs4: Unknown parameter '/sys/fs/smackfs/revoke-subject' 01:37:11 executing program 1: mknod(&(0x7f00000023c0)='./file1\x00', 0x442, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:11 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$nfs4(&(0x7f0000000480)='fsuuid', &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x18b7000, &(0x7f0000000540)={[{':&)'}, {}], [{@dont_appraise}]}) (async) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x400) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000140)='+{\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)={[{'/sys/fs/smackfs/revoke-subject\x00'}, {'/sys/fs/smackfs/revoke-subject\x00'}], [{@dont_hash}, {@uid_lt={'uid<', r3}}, {@euid_gt={'euid>', r0}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x3ed957626d47dab5, 0x35, 0x65, 0x33, 0x32, 0x57, 0x61], 0x2d, [0x38, 0x66, 0x30, 0x35], 0x2d, [0x31, 0x34, 0x62, 0x64], 0x2d, [0x30, 0x32, 0x0, 0x35], 0x2d, [0x36, 0x63, 0x35, 0x34, 0x52, 0x30, 0x37, 0x1]}}}, {@uid_lt}]}) 01:37:11 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x40, &(0x7f0000000080)) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '#,'}, {}, {0x20, 'memory.pressure\x00'}], 0xa, "025cb6fd737f1a37aeca2911752125910488ba0a8ee03951048c55f7cf5f71cee3665cc287901333281eb5ccc485ee76c889662f3d570dcf35d07377cf5ed57317cdb9130bf4a30485899648514d7540d282e5ea60b5cc64d3f310951c51ee457f3c17a37cafce52e381b729893f4ca438de431a96f1e69ce471a7d055e081d0f05e176d453428443fd0fbbb68d23075855df261d84403473b4a9d0751b26f9c6891c39767ddf8ae11907f"}, 0x113) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x40, &(0x7f0000000080)) (async) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '#,'}, {}, {0x20, 'memory.pressure\x00'}], 0xa, "025cb6fd737f1a37aeca2911752125910488ba0a8ee03951048c55f7cf5f71cee3665cc287901333281eb5ccc485ee76c889662f3d570dcf35d07377cf5ed57317cdb9130bf4a30485899648514d7540d282e5ea60b5cc64d3f310951c51ee457f3c17a37cafce52e381b729893f4ca438de431a96f1e69ce471a7d055e081d0f05e176d453428443fd0fbbb68d23075855df261d84403473b4a9d0751b26f9c6891c39767ddf8ae11907f"}, 0x113) (async) 01:37:12 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000021c0)={0x10, 0x0, r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$nfs4(&(0x7f0000000000)=',\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xc0020, &(0x7f0000002180)={[{'#'}, {'.{(#!\xda-'}, {'\''}], [{@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r2}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:12 executing program 1: mknod(&(0x7f00000023c0)='./file1\x00', 0x442, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:12 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x40, &(0x7f0000000080)) (async) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, 'memory.pressure\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '/dev/ubi_ctrl\x00'}, {0x20, 'memory.pressure\x00'}, {0x20, '#,'}, {}, {0x20, 'memory.pressure\x00'}], 0xa, "025cb6fd737f1a37aeca2911752125910488ba0a8ee03951048c55f7cf5f71cee3665cc287901333281eb5ccc485ee76c889662f3d570dcf35d07377cf5ed57317cdb9130bf4a30485899648514d7540d282e5ea60b5cc64d3f310951c51ee457f3c17a37cafce52e381b729893f4ca438de431a96f1e69ce471a7d055e081d0f05e176d453428443fd0fbbb68d23075855df261d84403473b4a9d0751b26f9c6891c39767ddf8ae11907f"}, 0x113) 01:37:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:12 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mount$nfs4(&(0x7f0000000480)='fsuuid', &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x18b7000, &(0x7f0000000540)={[{':&)'}, {}], [{@dont_appraise}]}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x400) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0xfffffffa}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x400000, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000140)='+{\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4, &(0x7f0000000200)={[{'/sys/fs/smackfs/revoke-subject\x00'}, {'/sys/fs/smackfs/revoke-subject\x00'}], [{@dont_hash}, {@uid_lt={'uid<', r3}}, {@euid_gt={'euid>', r0}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@uid_eq={'uid', 0x3d, r0}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x3ed957626d47dab5, 0x35, 0x65, 0x33, 0x32, 0x57, 0x61], 0x2d, [0x38, 0x66, 0x30, 0x35], 0x2d, [0x31, 0x34, 0x62, 0x64], 0x2d, [0x30, 0x32, 0x0, 0x35], 0x2d, [0x36, 0x63, 0x35, 0x34, 0x52, 0x30, 0x37, 0x1]}}}, {@uid_lt}]}) 01:37:12 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000021c0)={0x10, 0x0, r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$nfs4(&(0x7f0000000000)=',\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xc0020, &(0x7f0000002180)={[{'#'}, {'.{(#!\xda-'}, {'\''}], [{@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r2}}]}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:12 executing program 1: mknod(&(0x7f00000023c0)='./file1\x00', 0x442, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:12 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'}) fcntl$getown(r0, 0x9) 01:37:12 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000021c0)={0x10, 0x0, r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) mount$nfs4(&(0x7f0000000000)=',\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xc0020, &(0x7f0000002180)={[{'#'}, {'.{(#!\xda-'}, {'\''}], [{@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r2}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1772.123532][T23198] nfs4: Unknown parameter '/sys/fs/smackfs/revoke-subject' 01:37:12 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 01:37:12 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) 01:37:12 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'}) fcntl$getown(r0, 0x9) (async) fcntl$getown(r0, 0x9) 01:37:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) 01:37:12 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000100)={[{}, {}, {'&%-'}, {'-\''}, {'-{'}, {'}}'}], [{@dont_hash}, {@appraise}]}) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2300484, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\'-[&'}}, {@permit_directio}, {@euid_gt={'euid>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'pvfs2\x00'}}]}}, 0x0, 0x0, &(0x7f0000002580)="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") [ 1772.464670][T23213] audit_log_start: 38138 callbacks suppressed [ 1772.464689][T23213] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1772.465423][ T28] audit: type=1400 audit(1697852232.884:2954167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23211 comm="syz-executor.4" name="fs" dev="sysfs" ino=2 [ 1772.470956][ T5048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1772.478543][T15005] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1772.497759][ T5024] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1772.515659][ T4471] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1772.521627][T23214] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1772.523876][ T4471] audit: audit_lost=1023304 audit_rate_limit=0 audit_backlog_limit=64 [ 1772.538473][T23213] audit: audit_lost=1023305 audit_rate_limit=0 audit_backlog_limit=64 [ 1772.538494][T23213] audit: backlog limit exceeded 01:37:13 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 01:37:13 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'}) (async) fcntl$getown(r0, 0x9) 01:37:13 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) 01:37:13 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) (async) 01:37:13 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 01:37:13 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000100)={[{}, {}, {'&%-'}, {'-\''}, {'-{'}, {'}}'}], [{@dont_hash}, {@appraise}]}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2300484, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\'-[&'}}, {@permit_directio}, {@euid_gt={'euid>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'pvfs2\x00'}}]}}, 0x0, 0x0, &(0x7f0000002580)="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") 01:37:13 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x1100) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 01:37:13 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x1100) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 01:37:13 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:13 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$pvfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000100)={[{}, {}, {'&%-'}, {'-\''}, {'-{'}, {'}}'}], [{@dont_hash}, {@appraise}]}) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x2300484, &(0x7f0000002400)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}, {@blksize}, {@max_read={'max_read', 0x3d, 0x7fffffffffffffff}}, {@default_permissions}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\'-[&'}}, {@permit_directio}, {@euid_gt={'euid>', r1}}, {@uid_lt={'uid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, 'pvfs2\x00'}}]}}, 0x0, 0x0, &(0x7f0000002580)="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") 01:37:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:13 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:37:13 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100, 0x1100) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 01:37:13 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:13 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x20, 0xfffffffd) mount_setattr(0xffffffffffffffff, 0x0, 0x70, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:13 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:37:14 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file1'}], 0x1) 01:37:14 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) (async) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:14 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x15c04, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 01:37:14 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x20, 0xfffffffd) mount_setattr(0xffffffffffffffff, 0x0, 0x70, 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:14 executing program 4: chroot(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000100)={0xfff, 0xbdc8, 0x0, 0x3}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:14 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x200) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file1'}], 0x1) 01:37:14 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x20, 0xfffffffd) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x70, 0x0, 0x0) (async, rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 64) 01:37:14 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0/file0\x00'}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r0) 01:37:14 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003b080)={{0x0, 0x8000000000000001, 0x6, 0x6, 0x9, 0x3, 0xfffffffffffffffc, 0x530, 0x800, 0x6, 0x2, 0x1, 0x32b5, 0x9, 0x1ff}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003b140)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9de3237b5e76ac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003c140)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "e9843cccd4d022"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003d140)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "95a31302c34566"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003e140)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003e340)={{0x0, 0x3ff, 0x8d, 0x1, 0xa0, 0x6, 0x4, 0xa6ac, 0x4252, 0x3, 0x1, 0x0, 0x33, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003e400)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "9ffdab4b1ad34f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f400)={{0x0, 0x2, 0x2, 0x8000000000000001, 0x800080000000000, 0x1, 0x10000, 0x7, 0xf46bc18c, 0xa7, 0x101, 0x1, 0x101, 0x800, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f6c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000003f8c0)={{0x0, 0x4, 0x210, 0x5, 0x2, 0x4, 0x376a, 0x1be, 0x49a3, 0x81, 0x8, 0x7, 0x0, 0xe95d, 0x20}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f940)={{0x0, 0x1, 0x6, 0x5, 0x6, 0x5, 0x80000000, 0x10000, 0xfff, 0x34, 0xc7, 0x80, 0x2, 0x1, 0x7}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fa00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fc00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003fe00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000040000)={{0x0, 0x53, 0x2, 0x3f, 0x1, 0x8, 0xffffffffb678a783, 0x2, 0x6, 0xca, 0x94a, 0x9, 0x46, 0x3, 0x2}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000040080)={0x14a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7778ea5f147cc9"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000041080)={{0x0, 0x80000000, 0x2, 0xcc, 0x4, 0x4, 0xfffffffffffffffd, 0xab02, 0x1, 0x2, 0x686f, 0x4, 0x4, 0x4, 0x800}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000041100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "35d1b604dcf711"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000042100)={0xf5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "3fd0858e524956"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000043100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000043300)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "89e1ded443945d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044300)={0xdf63, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {r4}, {0x0, r5}, {r6}, {}, {r7}, {}, {}, {r8}, {r9}, {}, {}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r15}, {0x0, r16}, {r17, r18}, {r19}, {0x0, r20}, {}, {}, {}, {r21, r22}, {0x0, r23}], 0x5, "24365c6645ab6a"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r24}}, 0x18) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x5b5a, 0xa0000000, "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", 0x83, 0x9, 0x0, 0x29, 0x6, 0x40, 0x40}, r24}}, 0x128) 01:37:14 executing program 4: chroot(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000100)={0xfff, 0xbdc8, 0x0, 0x3}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) chroot(&(0x7f0000000040)='./file0\x00') (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000100)={0xfff, 0xbdc8, 0x0, 0x3}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) 01:37:14 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x200) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file1'}], 0x1) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x200) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$damon_contexts(r0, &(0x7f0000000040)=[{' ', './file1'}], 0x1) (async) 01:37:14 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x15c04, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) (async) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 01:37:14 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/71, 0x47) 01:37:14 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@filename='./file0\x00', r0, &(0x7f0000000140)={0x8000000000000001, 0x80000001, 0x0, 0x2}) 01:37:14 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003b080)={{0x0, 0x8000000000000001, 0x6, 0x6, 0x9, 0x3, 0xfffffffffffffffc, 0x530, 0x800, 0x6, 0x2, 0x1, 0x32b5, 0x9, 0x1ff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003b140)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9de3237b5e76ac"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003c140)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "e9843cccd4d022"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003d140)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "95a31302c34566"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003e140)={0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003e340)={{0x0, 0x3ff, 0x8d, 0x1, 0xa0, 0x6, 0x4, 0xa6ac, 0x4252, 0x3, 0x1, 0x0, 0x33, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003e400)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "9ffdab4b1ad34f"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f400)={{0x0, 0x2, 0x2, 0x8000000000000001, 0x800080000000000, 0x1, 0x10000, 0x7, 0xf46bc18c, 0xa7, 0x101, 0x1, 0x101, 0x800, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f4c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f6c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000003f8c0)={{0x0, 0x4, 0x210, 0x5, 0x2, 0x4, 0x376a, 0x1be, 0x49a3, 0x81, 0x8, 0x7, 0x0, 0xe95d, 0x20}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f940)={{0x0, 0x1, 0x6, 0x5, 0x6, 0x5, 0x80000000, 0x10000, 0xfff, 0x34, 0xc7, 0x80, 0x2, 0x1, 0x7}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fa00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fc00)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003fe00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000040000)={{0x0, 0x53, 0x2, 0x3f, 0x1, 0x8, 0xffffffffb678a783, 0x2, 0x6, 0xca, 0x94a, 0x9, 0x46, 0x3, 0x2}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000040080)={0x14a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7778ea5f147cc9"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000041080)={{0x0, 0x80000000, 0x2, 0xcc, 0x4, 0x4, 0xfffffffffffffffd, 0xab02, 0x1, 0x2, 0x686f, 0x4, 0x4, 0x4, 0x800}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000041100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "35d1b604dcf711"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000042100)={0xf5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "3fd0858e524956"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000043100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000043300)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "89e1ded443945d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044300)={0xdf63, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {r4}, {0x0, r5}, {r6}, {}, {r7}, {}, {}, {r8}, {r9}, {}, {}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r15}, {0x0, r16}, {r17, r18}, {r19}, {0x0, r20}, {}, {}, {}, {r21, r22}, {0x0, r23}], 0x5, "24365c6645ab6a"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r24}}, 0x18) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x5b5a, 0xa0000000, "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", 0x83, 0x9, 0x0, 0x29, 0x6, 0x40, 0x40}, r24}}, 0x128) 01:37:14 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x48080, 0x140) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x800) 01:37:14 executing program 4: chroot(&(0x7f0000000040)='./file0\x00') (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async, rerun: 32) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000100)={0xfff, 0xbdc8, 0x0, 0x3}) (async, rerun: 32) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:15 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/71, 0x47) 01:37:15 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@filename='./file0\x00', r0, &(0x7f0000000140)={0x8000000000000001, 0x80000001, 0x0, 0x2}) 01:37:15 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x48080, 0x140) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x800) 01:37:15 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x15c04, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) (async) fspick(r0, &(0x7f00000000c0)='./file0\x00', 0x0) 01:37:15 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003b080)={{0x0, 0x8000000000000001, 0x6, 0x6, 0x9, 0x3, 0xfffffffffffffffc, 0x530, 0x800, 0x6, 0x2, 0x1, 0x32b5, 0x9, 0x1ff}, 0x18, [0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003b140)={0x100000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9de3237b5e76ac"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000003c140)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "e9843cccd4d022"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003d140)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "95a31302c34566"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003e140)={0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f000003e340)={{0x0, 0x3ff, 0x8d, 0x1, 0xa0, 0x6, 0x4, 0xa6ac, 0x4252, 0x3, 0x1, 0x0, 0x33, 0x9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000003e400)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "9ffdab4b1ad34f"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f400)={{0x0, 0x2, 0x2, 0x8000000000000001, 0x800080000000000, 0x1, 0x10000, 0x7, 0xf46bc18c, 0xa7, 0x101, 0x1, 0x101, 0x800, 0x5}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f4c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003f6c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f000003f8c0)={{0x0, 0x4, 0x210, 0x5, 0x2, 0x4, 0x376a, 0x1be, 0x49a3, 0x81, 0x8, 0x7, 0x0, 0xe95d, 0x20}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000003f940)={{0x0, 0x1, 0x6, 0x5, 0x6, 0x5, 0x80000000, 0x10000, 0xfff, 0x34, 0xc7, 0x80, 0x2, 0x1, 0x7}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fa00)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000003fc00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f000003fe00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000040000)={{0x0, 0x53, 0x2, 0x3f, 0x1, 0x8, 0xffffffffb678a783, 0x2, 0x6, 0xca, 0x94a, 0x9, 0x46, 0x3, 0x2}, 0x8, [0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000040080)={0x14a9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x2, "7778ea5f147cc9"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000041080)={{0x0, 0x80000000, 0x2, 0xcc, 0x4, 0x4, 0xfffffffffffffffd, 0xab02, 0x1, 0x2, 0x686f, 0x4, 0x4, 0x4, 0x800}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000041100)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "35d1b604dcf711"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000042100)={0xf5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "3fd0858e524956"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000043100)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000043300)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xff, "89e1ded443945d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044300)={0xdf63, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r3}, {}, {}, {r4}, {0x0, r5}, {r6}, {}, {r7}, {}, {}, {r8}, {r9}, {}, {}, {}, {}, {0x0, r10}, {0x0, r11}, {}, {}, {r12}, {r13}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r15}, {0x0, r16}, {r17, r18}, {r19}, {0x0, r20}, {}, {}, {}, {r21, r22}, {0x0, r23}], 0x5, "24365c6645ab6a"}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r24}}, 0x18) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x5b5a, 0xa0000000, "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", 0x83, 0x9, 0x0, 0x29, 0x6, 0x40, 0x40}, r24}}, 0x128) 01:37:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10806, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/\\{%@[#\'):(}'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000200)="2f59084182b79c213d24d5cf9888c307bd05ef632fe1f9db99f29604a5e8c39eb30d4489029a3b0e0c6c36150bf0f36e71f07059728b967a1c599dc43785fa4b3fc12bf5b0795a66cf3ae914ceb11985257aed7a9dac65375f8044e05c208818aa455c06bce72ca544363c761d15199cdb15c35f45fece2b9fb5419b18af0169c8416562f60f86a818211fa423e3d09d0c638f9828710d7b72f6c1c6f7686d") mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:15 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x48080, 0x140) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x800) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x48080, 0x140) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x800) (async) 01:37:15 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/71, 0x47) 01:37:15 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 64) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@filename='./file0\x00', r0, &(0x7f0000000140)={0x8000000000000001, 0x80000001, 0x0, 0x2}) 01:37:15 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="97d59407f2bc3b04ef9add85f1b673d313513818df", 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 1775.114332][T23352] fuse: Invalid rootmode 01:37:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10806, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/\\{%@[#\'):(}'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000200)="2f59084182b79c213d24d5cf9888c307bd05ef632fe1f9db99f29604a5e8c39eb30d4489029a3b0e0c6c36150bf0f36e71f07059728b967a1c599dc43785fa4b3fc12bf5b0795a66cf3ae914ceb11985257aed7a9dac65375f8044e05c208818aa455c06bce72ca544363c761d15199cdb15c35f45fece2b9fb5419b18af0169c8416562f60f86a818211fa423e3d09d0c638f9828710d7b72f6c1c6f7686d") (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:15 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'}) 01:37:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x12080, &(0x7f0000000000)={[], [{@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}]}) 01:37:15 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="97d59407f2bc3b04ef9add85f1b673d313513818df", 0x15) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='-\x00', &(0x7f0000000100)='./file0\x00', r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd64) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x10000001}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/file0\x00'}) [ 1775.378665][T23367] fuse: Invalid rootmode 01:37:15 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x5) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'}) (async) 01:37:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x12080, &(0x7f0000000000)={[], [{@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}]}) 01:37:15 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10806, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/\\{%@[#\'):(}'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000200)="2f59084182b79c213d24d5cf9888c307bd05ef632fe1f9db99f29604a5e8c39eb30d4489029a3b0e0c6c36150bf0f36e71f07059728b967a1c599dc43785fa4b3fc12bf5b0795a66cf3ae914ceb11985257aed7a9dac65375f8044e05c208818aa455c06bce72ca544363c761d15199cdb15c35f45fece2b9fb5419b18af0169c8416562f60f86a818211fa423e3d09d0c638f9828710d7b72f6c1c6f7686d") mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x10806, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@obj_role={'obj_role', 0x3d, '/\\{%@[#\'):(}'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}}, 0x1, 0x0, &(0x7f0000000200)="2f59084182b79c213d24d5cf9888c307bd05ef632fe1f9db99f29604a5e8c39eb30d4489029a3b0e0c6c36150bf0f36e71f07059728b967a1c599dc43785fa4b3fc12bf5b0795a66cf3ae914ceb11985257aed7a9dac65375f8044e05c208818aa455c06bce72ca544363c761d15199cdb15c35f45fece2b9fb5419b18af0169c8416562f60f86a818211fa423e3d09d0c638f9828710d7b72f6c1c6f7686d") (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) 01:37:16 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x4040, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="97d59407f2bc3b04ef9add85f1b673d313513818df", 0x15) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x12080, &(0x7f0000000000)={[], [{@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}]}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x12080, &(0x7f0000000000)={[], [{@flag='ro'}, {@smackfshat={'smackfshat', 0x3d, 'bpf\x00'}}]}) (async) 01:37:16 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8001}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:16 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='-\x00', &(0x7f0000000100)='./file0\x00', r0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd64) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x10000001}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/file0\x00'}) 01:37:16 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x5) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'}) [ 1775.686102][T23388] fuse: Invalid rootmode 01:37:16 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65300a2deb3ee9f4fdae64e297732979b6370da46245f059b6728ff9e10fa803bf7c029b3f036605508fb9105beaa5b73ffb1a7b00000000000000083e2430"], 0x47) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8) [ 1775.735016][T23388] fuse: Invalid rootmode 01:37:16 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x151) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 01:37:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 01:37:16 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8001}}, 0x10) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:16 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='-\x00', &(0x7f0000000100)='./file0\x00', r0) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xd64) (async) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x10000001}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/file0\x00'}) 01:37:16 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x151) (async) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') 01:37:16 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65300a2deb3ee9f4fdae64e297732979b6370da46245f059b6728ff9e10fa803bf7c029b3f036605508fb9105beaa5b73ffb1a7b00000000000000083e2430"], 0x47) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8) 01:37:16 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0/file0\x00'}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x802, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}], [{@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@hash}]}}, 0x1, 0x0, &(0x7f00000002c0)="e654e0ef5a1cbaac6aeb6d45af5cc30559f8033b32f521e81020afa161eb13474065fec33986cb6dc8e0f4152fbbc598ad81d1c51ba02570c0bbdfabeb5969b77f23916f508475") open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:16 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8001}}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8001}}, 0x10) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) openat$cgroup_pressure(r3, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:16 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000000c0)=@l1={{0x8, 0x3a, 0x2, 0x3a, 0x37, 0x3a, 0x7, 0x3a, 0x6, 0x3a, 0x3, 0x3a, 0x2077ad9d, 0x3a, 0x1}, 0x20, '\'\\}'}, 0x9c) 01:37:16 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x151) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x8000, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x151) (async) pivot_root(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') (async) 01:37:16 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x60400, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2321202e2f66696c65300a2deb3ee9f4fdae64e297732979b6370da46245f059b6728ff9e10fa803bf7c029b3f036605508fb9105beaa5b73ffb1a7b00000000000000083e2430"], 0x47) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8) 01:37:16 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0/file0\x00'}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x802, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}], [{@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@hash}]}}, 0x1, 0x0, &(0x7f00000002c0)="e654e0ef5a1cbaac6aeb6d45af5cc30559f8033b32f521e81020afa161eb13474065fec33986cb6dc8e0f4152fbbc598ad81d1c51ba02570c0bbdfabeb5969b77f23916f508475") open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async) 01:37:16 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000000c0)=@l1={{0x8, 0x3a, 0x2, 0x3a, 0x37, 0x3a, 0x7, 0x3a, 0x6, 0x3a, 0x3, 0x3a, 0x2077ad9d, 0x3a, 0x1}, 0x20, '\'\\}'}, 0x9c) 01:37:16 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) 01:37:16 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0/file0\x00'}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x802, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}], [{@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@hash}]}}, 0x1, 0x0, &(0x7f00000002c0)="e654e0ef5a1cbaac6aeb6d45af5cc30559f8033b32f521e81020afa161eb13474065fec33986cb6dc8e0f4152fbbc598ad81d1c51ba02570c0bbdfabeb5969b77f23916f508475") open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0/file0\x00'}) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x802, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@allow_other}], [{@appraise}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@euid_gt={'euid>', 0xee01}}, {@hash}]}}, 0x1, 0x0, &(0x7f00000002c0)="e654e0ef5a1cbaac6aeb6d45af5cc30559f8033b32f521e81020afa161eb13474065fec33986cb6dc8e0f4152fbbc598ad81d1c51ba02570c0bbdfabeb5969b77f23916f508475") (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) 01:37:16 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"a2fa557352a03b656c338800", 0x0, 0x0, {0x7, 0x3}, {0x3, 0x4}, 0xffffffffffffffff, [0x90, 0x0, 0x4, 0x1, 0x3, 0xfff, 0x7fffffff, 0x6, 0x100000001, 0x5, 0x4, 0x7ff, 0x1, 0xffffffff, 0x8, 0x80]}) fcntl$getown(0xffffffffffffffff, 0x9) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x1) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) mount_setattr(r0, &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000200)={0x1000f3, 0x4, 0x80000, {r2}}, 0x20) 01:37:17 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x58a716a4fc57942b}}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f00000024c0)='./file0\x00', 0x101000, 0x100) write$FUSE_INTERRUPT(r3, &(0x7f0000002440)={0x10, 0xfffffffffffffffe, r1}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000002380)={0x30, 0x6, 0x0, {0x0, 0x4, 0x7, 0x0, 'user_id'}}, 0x30) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r7, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r8, 0xffffffffffffffff) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000002200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3c89}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80}}, {@default_permissions}], [{@smackfsroot}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r7}}, {@dont_appraise}, {@uid_gt={'uid>', r8}}, {@flag='nomand'}]}}, 0x1, 0x0, &(0x7f0000000080)="bb7bf55790ee7bc21b82783985656595468991b7b84db8a250ca492fe7965eface80ed0add3177a65053edc72927fcf30ac9d9b45a1780dae4752ca6744dc44198d349a18bddf1dfa6a1b276dde9c02ebe36dad1e1c78960aa35c6e18489464dc2fd37310dd1bce6dff4a435d84bf49bec2da1c8") ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r10, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r11, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000002500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000}}}, 0x30) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r12, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000002480)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000023c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r9, @ANYBLOB="020000130000008fcd216c653100"]) 01:37:17 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000000c0)=@l1={{0x8, 0x3a, 0x2, 0x3a, 0x37, 0x3a, 0x7, 0x3a, 0x6, 0x3a, 0x3, 0x3a, 0x2077ad9d, 0x3a, 0x1}, 0x20, '\'\\}'}, 0x9c) 01:37:17 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) 01:37:17 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') mount_setattr(r0, &(0x7f0000000040)='./file0/file0\x00', 0x8000, &(0x7f0000000080)={0x0, 0x100088, 0x120000}, 0x20) [ 1776.836244][T23460] fuse: Bad value for 'fd' 01:37:17 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x5) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2070098, &(0x7f0000000140)={[{'#'}, {'!@/'}, {}, {'\xd3}\\'}, {}, {'('}, {}, {']@]*\\$}Q\x8f\xf7%[\r'}], [{@subj_type}, {@subj_role={'subj_role', 0x3d, '@\\\xb3}]!)&/&{-&['}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lchown(&(0x7f0000000240)='./file0\x00', r2, r1) 01:37:17 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"a2fa557352a03b656c338800", 0x0, 0x0, {0x7, 0x3}, {0x3, 0x4}, 0xffffffffffffffff, [0x90, 0x0, 0x4, 0x1, 0x3, 0xfff, 0x7fffffff, 0x6, 0x100000001, 0x5, 0x4, 0x7ff, 0x1, 0xffffffff, 0x8, 0x80]}) (async, rerun: 32) fcntl$getown(0xffffffffffffffff, 0x9) (async, rerun: 32) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x1) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (rerun: 64) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) mount_setattr(r0, &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000200)={0x1000f3, 0x4, 0x80000, {r2}}, 0x20) 01:37:17 executing program 3: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0/file0\x00'}) 01:37:17 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async) 01:37:17 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0/file0\x00') mount_setattr(r0, &(0x7f0000000040)='./file0/file0\x00', 0x8000, &(0x7f0000000080)={0x0, 0x100088, 0x120000}, 0x20) 01:37:17 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x5) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2070098, &(0x7f0000000140)={[{'#'}, {'!@/'}, {}, {'\xd3}\\'}, {}, {'('}, {}, {']@]*\\$}Q\x8f\xf7%[\r'}], [{@subj_type}, {@subj_role={'subj_role', 0x3d, '@\\\xb3}]!)&/&{-&['}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) (async) mount$nfs4(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2070098, &(0x7f0000000140)={[{'#'}, {'!@/'}, {}, {'\xd3}\\'}, {}, {'('}, {}, {']@]*\\$}Q\x8f\xf7%[\r'}], [{@subj_type}, {@subj_role={'subj_role', 0x3d, '@\\\xb3}]!)&/&{-&['}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lchown(&(0x7f0000000240)='./file0\x00', r2, r1) 01:37:17 executing program 5: mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') mount_setattr(r0, &(0x7f0000000040)='./file0/file0\x00', 0x8000, &(0x7f0000000080)={0x0, 0x100088, 0x120000}, 0x20) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000100)='./file0/file0\x00') (async) mount_setattr(r0, &(0x7f0000000040)='./file0/file0\x00', 0x8000, &(0x7f0000000080)={0x0, 0x100088, 0x120000}, 0x20) (async) 01:37:17 executing program 3: mknod(&(0x7f00000000c0)='./file0\x00', 0x2, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x109500, 0x8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x4000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, &(0x7f0000000600)="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") r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/118, 0x76) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x8000) [ 1777.473209][ T28] kauditd_printk_skb: 34935 callbacks suppressed [ 1777.473228][ T28] audit: type=1400 audit(1697852237.894:2975302): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23491 comm="syz-executor.5" name="333" dev="sda1" ino=1943 [ 1777.481013][T23491] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.500847][ T5056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.507506][ T4482] audit: audit_lost=1027961 audit_rate_limit=0 audit_backlog_limit=64 01:37:18 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x58a716a4fc57942b}}, './file0\x00'}) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f00000024c0)='./file0\x00', 0x101000, 0x100) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000002440)={0x10, 0xfffffffffffffffe, r1}, 0x10) (async) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 32) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000002380)={0x30, 0x6, 0x0, {0x0, 0x4, 0x7, 0x0, 'user_id'}}, 0x30) (async, rerun: 32) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r7, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r8, 0xffffffffffffffff) (async, rerun: 64) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000002200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3c89}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80}}, {@default_permissions}], [{@smackfsroot}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r7}}, {@dont_appraise}, {@uid_gt={'uid>', r8}}, {@flag='nomand'}]}}, 0x1, 0x0, &(0x7f0000000080)="bb7bf55790ee7bc21b82783985656595468991b7b84db8a250ca492fe7965eface80ed0add3177a65053edc72927fcf30ac9d9b45a1780dae4752ca6744dc44198d349a18bddf1dfa6a1b276dde9c02ebe36dad1e1c78960aa35c6e18489464dc2fd37310dd1bce6dff4a435d84bf49bec2da1c8") (rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r10, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r11, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000002500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000}}}, 0x30) (async, rerun: 64) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) openat$cgroup_pressure(r12, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000002480)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000023c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r9, @ANYBLOB="020000130000008fcd216c653100"]) 01:37:18 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x5) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x5) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$nfs4(&(0x7f0000000040)='\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2070098, &(0x7f0000000140)={[{'#'}, {'!@/'}, {}, {'\xd3}\\'}, {}, {'('}, {}, {']@]*\\$}Q\x8f\xf7%[\r'}], [{@subj_type}, {@subj_role={'subj_role', 0x3d, '@\\\xb3}]!)&/&{-&['}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r2, 0xffffffffffffffff) lchown(&(0x7f0000000240)='./file0\x00', r2, r1) 01:37:18 executing program 4: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"a2fa557352a03b656c338800", 0x0, 0x0, {0x7, 0x3}, {0x3, 0x4}, 0xffffffffffffffff, [0x90, 0x0, 0x4, 0x1, 0x3, 0xfff, 0x7fffffff, 0x6, 0x100000001, 0x5, 0x4, 0x7ff, 0x1, 0xffffffff, 0x8, 0x80]}) (async) fcntl$getown(0xffffffffffffffff, 0x9) (async, rerun: 32) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x1) (async, rerun: 32) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async, rerun: 32) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) mount_setattr(r0, &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000200)={0x1000f3, 0x4, 0x80000, {r2}}, 0x20) [ 1777.507529][ T4482] audit: backlog limit exceeded [ 1777.507557][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.507572][ T4482] audit: audit_lost=1027962 audit_rate_limit=0 audit_backlog_limit=64 [ 1777.524713][T23486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.527743][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1777.534083][T23491] audit: audit_lost=1027963 audit_rate_limit=0 audit_backlog_limit=64 01:37:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$getown(r0, 0x9) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(r3, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r2}}, 0xc) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 1777.692655][T23497] fuse: Bad value for 'user_id' 01:37:18 executing program 3: mknod(&(0x7f00000000c0)='./file0\x00', 0x2, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x109500, 0x8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) (async) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) (async) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x4000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, &(0x7f0000000600)="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") r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/118, 0x76) (async) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/118, 0x76) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x8000) 01:37:18 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002580)={0x20, 0x0, r1}, 0x20) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x1}}, 0x20) 01:37:18 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x58a716a4fc57942b}}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f00000024c0)='./file0\x00', 0x101000, 0x100) (async) write$FUSE_INTERRUPT(r3, &(0x7f0000002440)={0x10, 0xfffffffffffffffe, r1}, 0x10) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 64) read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020) (async, rerun: 64) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000002380)={0x30, 0x6, 0x0, {0x0, 0x4, 0x7, 0x0, 'user_id'}}, 0x30) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r7, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r8, 0xffffffffffffffff) (async) r9 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000002200)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@default_permissions}, {@blksize}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x3c89}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x80}}, {@default_permissions}], [{@smackfsroot}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r7}}, {@dont_appraise}, {@uid_gt={'uid>', r8}}, {@flag='nomand'}]}}, 0x1, 0x0, &(0x7f0000000080)="bb7bf55790ee7bc21b82783985656595468991b7b84db8a250ca492fe7965eface80ed0add3177a65053edc72927fcf30ac9d9b45a1780dae4752ca6744dc44198d349a18bddf1dfa6a1b276dde9c02ebe36dad1e1c78960aa35c6e18489464dc2fd37310dd1bce6dff4a435d84bf49bec2da1c8") (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async, rerun: 64) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) openat$cgroup_pressure(r10, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r11, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000002500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8000}}}, 0x30) (async) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r12, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r12, 0xc018937e, &(0x7f0000002480)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f00000023c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r9, @ANYBLOB="020000130000008fcd216c653100"]) 01:37:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$getown(r0, 0x9) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(r3, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:18 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2e2f66696c7b3b65302f66696c6530001e16e4579042278e8d4a94500cc44a90d21e702ede3cae56fe5b46db268765c4d653162e0f9df57b8d920763b398722da82e26649142273728e0636dfb4063c772f6f8d93cbc820b7d8fda17307a032a3f02cd5872df862fb76e491598c3fd890a339a1ecfd98c01b807781dc7c28517e20009f2bbc52e187bba4b7a8247b23dd0e3bbf444d94d79626cfc34a5c230484678bb1fa520f47600000000000000000000000000bf1ce2bb1808da166ce3a79e30dbbeb2c959088bdd8a5a72db2943dde948d4c8dbbb35b58dea6db9f0197a74d7291b1388e2fa3a66c19e29d27598c6d5b2b212a978bd18c9f48978be821233876335e27041a1c8114b885e54a797300ca8af091230263758bb285427ca551fc6afb07100a67918ef81a145a6a26c77c288fa608da7df00082de675310a8650a298d990a346748a2915b4da28c785e1f22c2194b1823f51c4519221c996300b04dc7efb1ab499b49361be9692011d875a16eb8d78f87e1031d167504001e245bef28c9c8812019a46535c943f9700e66613effe135c829d3dadc9fa"]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r0}}]}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:18 executing program 3: mknod(&(0x7f00000000c0)='./file0\x00', 0x2, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x109500, 0x8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) (async) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x4000, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}}, 0x0, 0x0, &(0x7f0000000600)="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") r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/118, 0x76) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x8000) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x8000) 01:37:18 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x548401, 0x0) r0 = epoll_create(0x3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:18 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$getown(r0, 0x9) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) r3 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs$userns(r3, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) [ 1778.293959][T23529] fuse: Bad value for 'user_id' 01:37:18 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x548401, 0x0) r0 = epoll_create(0x3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x548401, 0x0) (async) epoll_create(0x3) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:18 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002580)={0x20, 0x0, r1}, 0x20) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x1}}, 0x20) 01:37:18 executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:19 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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"]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r0}}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r0}}]}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:19 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x548401, 0x0) (async) r0 = epoll_create(0x3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:19 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x1000, 0x80000000) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r2, {0x2, 0x4, 0xe4a, 0x400}}, 0x20) 01:37:19 executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:19 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x250101, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:19 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x1000, 0x80000000) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) (async) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r2, {0x2, 0x4, 0xe4a, 0x400}}, 0x20) 01:37:19 executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0xfffffffc) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 32) 01:37:19 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x250101, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x250101, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:19 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x1000, 0x80000000) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f00000025c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r2, {0x2, 0x4, 0xe4a, 0x400}}, 0x20) mknod(&(0x7f00000023c0)='./file0\x00', 0x1000, 0x80000000) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f00000025c0)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) (async) write$FUSE_IOCTL(r0, &(0x7f0000000040)={0x20, 0x0, r2, {0x2, 0x4, 0xe4a, 0x400}}, 0x20) (async) 01:37:19 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x250101, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:19 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000002580)={0x20, 0x0, r1}, 0x20) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x1}}, 0x20) 01:37:19 executing program 5: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x80000000}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 01:37:19 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000001180)={0x3, 0xfffffffffffffff8, 0x0, 0x6}) 01:37:19 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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"]) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}], [{@audit}, {@fowner_eq={'fowner', 0x3d, r0}}]}) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:19 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000001180)={0x3, 0xfffffffffffffff8, 0x0, 0x6}) 01:37:20 executing program 5: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x80000000}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 32) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) (rerun: 32) 01:37:20 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000001180)={0x3, 0xfffffffffffffff8, 0x0, 0x6}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/4096, 0x1000) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100), 0x4000) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000001180)={0x3, 0xfffffffffffffff8, 0x0, 0x6}) (async) 01:37:20 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB="336f2cf26f0c636fd7fd6c4a2f1610389e02", @ANYRESDEC=r3, @ANYBLOB=',subj_role=,context=staff_u,pcr=00000000000000000004,\x00']) 01:37:20 executing program 5: r0 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x80000000}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x0) 01:37:20 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) 01:37:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 01:37:20 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x32401, 0x9) 01:37:20 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB="336f2cf26f0c636fd7fd6c4a2f1610389e02", @ANYRESDEC=r3, @ANYBLOB=',subj_role=,context=staff_u,pcr=00000000000000000004,\x00']) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB="336f2cf26f0c636fd7fd6c4a2f1610389e02", @ANYRESDEC=r3, @ANYBLOB=',subj_role=,context=staff_u,pcr=00000000000000000004,\x00']) (async) 01:37:20 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:20 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 01:37:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0/file0\x00', 0x32401, 0x9) 01:37:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) (async) 01:37:21 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, r2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1010, &(0x7f0000000180)=ANY=[@ANYBLOB="336f2cf26f0c636fd7fd6c4a2f1610389e02", @ANYRESDEC=r3, @ANYBLOB=',subj_role=,context=staff_u,pcr=00000000000000000004,\x00']) 01:37:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) 01:37:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0/file0\x00', 0x32401, 0x9) 01:37:21 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:21 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x22, &(0x7f00000000c0)={[{}, {@mode={'mode', 0x3d, 0xd7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x437}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x9719}}, {@mode={'mode', 0x3d, 0x2}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '#$'}}, {@measure}, {@obj_role={'obj_role', 0x3d, '/'}}]}) open(&(0x7f0000000040)='./file0\x00', 0x142, 0x84) 01:37:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0xc000, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)={'veth1_to_bond', 0x32, 0x33}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x40000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000300)="4e9a5c25f5b012a7b21936683f5f78d3005f814348ba842d291f15329e5634f091ab9a4f937cc8a8d1758b5a911b445a6b3f7e1e9a1c2e0d48e940abd605a61ebb6f7ed4") mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xf859ee13f7878cbe, 0x103) 01:37:21 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x22, &(0x7f00000000c0)={[{}, {@mode={'mode', 0x3d, 0xd7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x437}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x9719}}, {@mode={'mode', 0x3d, 0x2}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '#$'}}, {@measure}, {@obj_role={'obj_role', 0x3d, '/'}}]}) (async) open(&(0x7f0000000040)='./file0\x00', 0x142, 0x84) 01:37:21 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./file1\x00', 0xc000, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:21 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x40000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000300)="4e9a5c25f5b012a7b21936683f5f78d3005f814348ba842d291f15329e5634f091ab9a4f937cc8a8d1758b5a911b445a6b3f7e1e9a1c2e0d48e940abd605a61ebb6f7ed4") mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xf859ee13f7878cbe, 0x103) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x40000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000300)="4e9a5c25f5b012a7b21936683f5f78d3005f814348ba842d291f15329e5634f091ab9a4f937cc8a8d1758b5a911b445a6b3f7e1e9a1c2e0d48e940abd605a61ebb6f7ed4") (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xf859ee13f7878cbe, 0x103) (async) 01:37:21 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000042180)={{0x0, 0x1, 0xeafd, 0x0, 0x8000, 0x8, 0x5, 0x3, 0x2, 0xd1, 0x1, 0x8000, 0x100000001, 0xffffffffffffffff, 0x2}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042200)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "e173b83250f95f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043200)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "963fcac90c5b5b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044200)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "5f0304f935e93f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045200)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045600)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "e0001f900f78f7"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6d, "03a2fbecfedf1b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000047600)={{0x0, 0x2, 0x0, 0x4575, 0x8001, 0x80000000, 0x4, 0x7fff, 0x200, 0x0, 0xe892, 0x6, 0x6, 0x3f, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000476c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8b, "143eb88ba2a743"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000486c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000488c0)={{0x0, 0xe729, 0xffffffffffffffe6, 0x800, 0x7f, 0xa2e, 0x4, 0xb3eb, 0x3ff, 0x0, 0x8000, 0xffffffff, 0x6, 0x2, 0xc6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048980)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "644ec7944ef24c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000001800000000000000100010000000000810000000000000006000000000000000000000000000000950a00002000000005000000000400000500000000000000ffffffffffffff7f0000000000000000030000000000000008000000000000000000000000000000ea7b92c08a68b65667b55ab8b89e1a38c156ecc57d1a3f8eb186a6d081ed5a932715df6941841e5476629e6d1bf29003b40d49c2b94cb4bf49fb82f88ac4f562c3b83d42258d8ddcafe1d5766f73195b1a683ea84f9b27ce5631f0133572d282abe76b9b2ef06796fbb50a1dc38c40ff9b2879"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049a00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="e1000000000000000900000000000000090000000000000000000000000000000900000001000000ffffffffffffffffff060000070000000700000001800000000400006e0000000454e6ed6b569285ae56f12311564f6c180000000000000031ba7d7b000000000300000000000000380000000000000000b5ef183d910328e0fc11c300000000000000000000005fb25122000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017f4d8a3a05574d5bac8"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049ec0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "64ed2ccb1391d1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004aec0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004b0c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b2c0)={0x8000000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x84, "25dc58d6c0d7ad"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c2c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x48, "ded85574dbdcfc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d2c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x17, "c5b6decc851d95"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e2c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "07e0d27daed8c1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f2c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f6c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f8c0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {r2, r3}, {r4}, {0x0, r5}, {}, {}, {}, {}, {0x0, r6}, {}, {r7}, {r8}, {}, {}, {}, {}, {0x0, r9}, {r10}, {r11, r12}, {}, {}, {r13}, {}, {}, {}, {r14}, {}, {}, {0x0, r15}, {r16}, {}, {}, {}, {}, {r17}, {r18}, {}, {r19}, {}, {}, {0x0, r20}, {}, {r21, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {0x0, r24}, {}, {}, {0x0, r25}, {0x0, r26}], 0xff, "8fcfbe67d06d32"}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) 01:37:21 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)={'veth1_to_bond', 0x32, 0x33}, 0x10) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:21 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x8, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x22, &(0x7f00000000c0)={[{}, {@mode={'mode', 0x3d, 0xd7}}, {@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x437}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x9719}}, {@mode={'mode', 0x3d, 0x2}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '#$'}}, {@measure}, {@obj_role={'obj_role', 0x3d, '/'}}]}) (async, rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x142, 0x84) (rerun: 64) 01:37:22 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)={'veth1_to_bond', 0x32, 0x33}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000)={'veth1_to_bond', 0x32, 0x33}, 0x10) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:22 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x40000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000300)="4e9a5c25f5b012a7b21936683f5f78d3005f814348ba842d291f15329e5634f091ab9a4f937cc8a8d1758b5a911b445a6b3f7e1e9a1c2e0d48e940abd605a61ebb6f7ed4") (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0/file0\x00', 0x40000, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@uid_lt}, {@context={'context', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}, {@hash}]}}, 0x0, 0x0, &(0x7f0000000300)="4e9a5c25f5b012a7b21936683f5f78d3005f814348ba842d291f15329e5634f091ab9a4f937cc8a8d1758b5a911b445a6b3f7e1e9a1c2e0d48e940abd605a61ebb6f7ed4") mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xf859ee13f7878cbe, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xf859ee13f7878cbe, 0x103) 01:37:22 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000042180)={{0x0, 0x1, 0xeafd, 0x0, 0x8000, 0x8, 0x5, 0x3, 0x2, 0xd1, 0x1, 0x8000, 0x100000001, 0xffffffffffffffff, 0x2}, 0x10, [0x0, 0x0]}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042200)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "e173b83250f95f"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043200)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "963fcac90c5b5b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044200)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "5f0304f935e93f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045200)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045400)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045600)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "e0001f900f78f7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6d, "03a2fbecfedf1b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000047600)={{0x0, 0x2, 0x0, 0x4575, 0x8001, 0x80000000, 0x4, 0x7fff, 0x200, 0x0, 0xe892, 0x6, 0x6, 0x3f, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000476c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8b, "143eb88ba2a743"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000486c0)={0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000488c0)={{0x0, 0xe729, 0xffffffffffffffe6, 0x800, 0x7f, 0xa2e, 0x4, 0xb3eb, 0x3ff, 0x0, 0x8000, 0xffffffff, 0x6, 0x2, 0xc6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048980)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "644ec7944ef24c"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000001800000000000000100010000000000810000000000000006000000000000000000000000000000950a00002000000005000000000400000500000000000000ffffffffffffff7f0000000000000000030000000000000008000000000000000000000000000000ea7b92c08a68b65667b55ab8b89e1a38c156ecc57d1a3f8eb186a6d081ed5a932715df6941841e5476629e6d1bf29003b40d49c2b94cb4bf49fb82f88ac4f562c3b83d42258d8ddcafe1d5766f73195b1a683ea84f9b27ce5631f0133572d282abe76b9b2ef06796fbb50a1dc38c40ff9b2879"]) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049a00)={0x0}) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="e1000000000000000900000000000000090000000000000000000000000000000900000001000000ffffffffffffffffff060000070000000700000001800000000400006e0000000454e6ed6b569285ae56f12311564f6c180000000000000031ba7d7b000000000300000000000000380000000000000000b5ef183d910328e0fc11c300000000000000000000005fb25122000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017f4d8a3a05574d5bac8"]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049ec0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "64ed2ccb1391d1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004aec0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004b0c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b2c0)={0x8000000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x84, "25dc58d6c0d7ad"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c2c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x48, "ded85574dbdcfc"}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d2c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x17, "c5b6decc851d95"}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e2c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "07e0d27daed8c1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f2c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f4c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f6c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f8c0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {r2, r3}, {r4}, {0x0, r5}, {}, {}, {}, {}, {0x0, r6}, {}, {r7}, {r8}, {}, {}, {}, {}, {0x0, r9}, {r10}, {r11, r12}, {}, {}, {r13}, {}, {}, {}, {r14}, {}, {}, {0x0, r15}, {r16}, {}, {}, {}, {}, {r17}, {r18}, {}, {r19}, {}, {}, {0x0, r20}, {}, {r21, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {0x0, r24}, {}, {}, {0x0, r25}, {0x0, r26}], 0xff, "8fcfbe67d06d32"}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:22 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file1\x00', 0xc000, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:22 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002280), 0x84041, 0x0) fstat(r0, &(0x7f00000022c0)) syz_mount_image$fuse(&(0x7f0000002200), &(0x7f0000002240)='./file0\x00', 0x200a000, &(0x7f0000002340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@max_read={'max_read', 0x3d, 0xfff}}]}}, 0x0, 0x0, &(0x7f00000024c0)="015000e3b6183cad0a9177f9788ed32ab839a1f1b8ba6d9d95fbc8692eb3db3edb9819b9f54cd28101c12679bee8e63fccc94dc44b99bfc2018c4da38d3a8f2f5f3d7e1f7c21490d70f97828ff569b823ad704535ac27093ac5f85a2dcc9a10da92fcd9983a514db713d788839ac77fa88fe90df5b5c8b8ff7959586d04ebaf32f4d3646fe8378217e47009080e24de2fe54c5248f1e3d60c911518a9e0b7b7a066ecc85275309aed52e9506c24a218be46eede40b11381f3e3bf7ab68a22fff6fea486e7f8ad9dea9873b940c9054324f22201dfbdecd812aff0abcc227d6924f7f29ae1ecc74192df6188c35314ec53227") read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000280)="29c270e0b695bd93f3b498eb09ea15098df56969584e9228ccde535ce0bc64a383f0c1567a38130b6b3185d1ad218367eba945c2cce9b73506008d9fbab3f016faf452bc9da7bef7e726c2a8291fe0156b191efcc5d6964a6164a1fbe89fdee504c49dee081c73b14c05a65bb11f6b161774338cdbb0ddc9e2b2830d9a5fa2278f93b4e2") mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)) 01:37:22 executing program 2: r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x21c409, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x3a00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4a}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, &(0x7f0000000400)="d1e6f5a2e45f7831eb42f3d03245243c7dcc7bbc57b75d14a49ce1b1044546baf45c7c9d376aa15162cb5d84f9efa330ab7778566c37e2d472b6d551a51537e42d31acc0042d9aa4fe6dd2a958ca43a515f32e855485bac552fc96dc4b9ad695080c2d030147019d978dd2725d34f43c870f7103ae2d3b34b4a81c9451c6b080f9699da908a99dff776500969dba587e59b98dc86f133e388260fe2f27629fef8814c51fc273bf69a76a22eed89b9c526f8d6bc09d32f887d6ea5ef2d509bb2184a11898811e58336298f452a7581f5bf027732486d036c4f15e4c3230a86c754133cca7") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x86140, 0x1c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/92, 0x5c, &(0x7f00000000c0)=""/90, 0x0, 0x4}}, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) 01:37:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x7ff8, @mcast1, 0x80e6}, r2}}, 0x38) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000300)={'trans=virtio,', {[{@cache_mmap}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x37, 0x37, 0x61, 0x61, 0x51, 0x63], 0x2d, [0x62, 0x31, 0x62, 0x34], 0x2d, [0x61, 0x36, 0x36, 0x63], 0x2d, [0x62, 0x35, 0x34, 0x63], 0x2d, [0x66, 0x62, 0x30, 0x32, 0x38, 0x31, 0x31, 0x30]}}}]}}) 01:37:22 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000042180)={{0x0, 0x1, 0xeafd, 0x0, 0x8000, 0x8, 0x5, 0x3, 0x2, 0xd1, 0x1, 0x8000, 0x100000001, 0xffffffffffffffff, 0x2}, 0x10, [0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000042200)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x40, "e173b83250f95f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000043200)={0xffffffff80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x80, "963fcac90c5b5b"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044200)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "5f0304f935e93f"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045200)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000045400)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000045600)={0xfffffffffffffff9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3f, "e0001f900f78f7"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000046600)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6d, "03a2fbecfedf1b"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000047600)={{0x0, 0x2, 0x0, 0x4575, 0x8001, 0x80000000, 0x4, 0x7fff, 0x200, 0x0, 0xe892, 0x6, 0x6, 0x3f, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000476c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8b, "143eb88ba2a743"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000486c0)={0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000488c0)={{0x0, 0xe729, 0xffffffffffffffe6, 0x800, 0x7f, 0xa2e, 0x4, 0xb3eb, 0x3ff, 0x0, 0x8000, 0xffffffff, 0x6, 0x2, 0xc6}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048980)={0xfffffffffffffff7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x4, "644ec7944ef24c"}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="030000000000000001800000000000000100010000000000810000000000000006000000000000000000000000000000950a00002000000005000000000400000500000000000000ffffffffffffff7f0000000000000000030000000000000008000000000000000000000000000000ea7b92c08a68b65667b55ab8b89e1a38c156ecc57d1a3f8eb186a6d081ed5a932715df6941841e5476629e6d1bf29003b40d49c2b94cb4bf49fb82f88ac4f562c3b83d42258d8ddcafe1d5766f73195b1a683ea84f9b27ce5631f0133572d282abe76b9b2ef06796fbb50a1dc38c40ff9b2879"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049a00)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000049c00)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="e1000000000000000900000000000000090000000000000000000000000000000900000001000000ffffffffffffffffff060000070000000700000001800000000400006e0000000454e6ed6b569285ae56f12311564f6c180000000000000031ba7d7b000000000300000000000000380000000000000000b5ef183d910328e0fc11c300000000000000000000005fb25122000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017f4d8a3a05574d5bac8"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000049ec0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3f, "64ed2ccb1391d1"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004aec0)={0x0, ""/256, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004b0c0)={0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004b2c0)={0x8000000000000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x84, "25dc58d6c0d7ad"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004c2c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x48, "ded85574dbdcfc"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d2c0)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x17, "c5b6decc851d95"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004e2c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x5, "07e0d27daed8c1"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f2c0)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f6c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f8c0)={0xffffffffffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0, r1}, {r2, r3}, {r4}, {0x0, r5}, {}, {}, {}, {}, {0x0, r6}, {}, {r7}, {r8}, {}, {}, {}, {}, {0x0, r9}, {r10}, {r11, r12}, {}, {}, {r13}, {}, {}, {}, {r14}, {}, {}, {0x0, r15}, {r16}, {}, {}, {}, {}, {r17}, {r18}, {}, {r19}, {}, {}, {0x0, r20}, {}, {r21, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {0x0, r24}, {}, {}, {0x0, r25}, {0x0, r26}], 0xff, "8fcfbe67d06d32"}) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:22 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x860001, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x40}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x2}}], [{@uid_lt={'uid<', r0}}]}) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) r4 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x800080, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, 'uid<'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'uid<'}}]}}, 0x0, 0x0, &(0x7f00000004c0)="241455fed34ddaf290984b85149baa64cf60a1b9b6c890754a") renameat2(r3, &(0x7f0000000200)='./file0/file0/file0/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x6) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000780)='{\x00', &(0x7f00000007c0)='./file0/file0\x00', r4) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0/file0/file0\x00', &(0x7f00000005c0), 0x800000, &(0x7f00000006c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, 'uid<'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x37, 0x64, 0x61, 0x30, 0x0, 0x36], 0x2d, [0x38, 0x32, 0x33, 0x32], 0x2d, [0x31, 0x30, 0x33, 0x65], 0x2d, [0x36, 0x61, 0x36, 0x37], 0x2d, [0x64, 0x64, 0x39, 0x38, 0x38, 0x36, 0x32, 0x32]}}}, {@seclabel}, {@appraise}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@appraise_type}]}}) readlink(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f00000002c0)=""/140, 0x8c) [ 1782.088917][T23710] fuse: Bad value for 'fd' 01:37:22 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) 01:37:22 executing program 2: r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x21c409, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x3a00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4a}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, &(0x7f0000000400)="d1e6f5a2e45f7831eb42f3d03245243c7dcc7bbc57b75d14a49ce1b1044546baf45c7c9d376aa15162cb5d84f9efa330ab7778566c37e2d472b6d551a51537e42d31acc0042d9aa4fe6dd2a958ca43a515f32e855485bac552fc96dc4b9ad695080c2d030147019d978dd2725d34f43c870f7103ae2d3b34b4a81c9451c6b080f9699da908a99dff776500969dba587e59b98dc86f133e388260fe2f27629fef8814c51fc273bf69a76a22eed89b9c526f8d6bc09d32f887d6ea5ef2d509bb2184a11898811e58336298f452a7581f5bf027732486d036c4f15e4c3230a86c754133cca7") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x86140, 0x1c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/92, 0x5c, &(0x7f00000000c0)=""/90, 0x0, 0x4}}, 0x48) (async) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r4}}, 0xc) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) [ 1782.134848][T23712] 9pnet_virtio: no channels available for device syz 01:37:22 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:37:22 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x7ff8, @mcast1, 0x80e6}, r2}}, 0x38) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000300)={'trans=virtio,', {[{@cache_mmap}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x37, 0x37, 0x61, 0x61, 0x51, 0x63], 0x2d, [0x62, 0x31, 0x62, 0x34], 0x2d, [0x61, 0x36, 0x36, 0x63], 0x2d, [0x62, 0x35, 0x34, 0x63], 0x2d, [0x66, 0x62, 0x30, 0x32, 0x38, 0x31, 0x31, 0x30]}}}]}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x7ff8, @mcast1, 0x80e6}, r2}}, 0x38) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000300)={'trans=virtio,', {[{@cache_mmap}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x37, 0x37, 0x61, 0x61, 0x51, 0x63], 0x2d, [0x62, 0x31, 0x62, 0x34], 0x2d, [0x61, 0x36, 0x36, 0x63], 0x2d, [0x62, 0x35, 0x34, 0x63], 0x2d, [0x66, 0x62, 0x30, 0x32, 0x38, 0x31, 0x31, 0x30]}}}]}}) (async) [ 1782.274029][T23718] fuse: Bad value for 'fd' 01:37:22 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002280), 0x84041, 0x0) fstat(r0, &(0x7f00000022c0)) (async) fstat(r0, &(0x7f00000022c0)) syz_mount_image$fuse(&(0x7f0000002200), &(0x7f0000002240)='./file0\x00', 0x200a000, &(0x7f0000002340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@max_read={'max_read', 0x3d, 0xfff}}]}}, 0x0, 0x0, &(0x7f00000024c0)="015000e3b6183cad0a9177f9788ed32ab839a1f1b8ba6d9d95fbc8692eb3db3edb9819b9f54cd28101c12679bee8e63fccc94dc44b99bfc2018c4da38d3a8f2f5f3d7e1f7c21490d70f97828ff569b823ad704535ac27093ac5f85a2dcc9a10da92fcd9983a514db713d788839ac77fa88fe90df5b5c8b8ff7959586d04ebaf32f4d3646fe8378217e47009080e24de2fe54c5248f1e3d60c911518a9e0b7b7a066ecc85275309aed52e9506c24a218be46eede40b11381f3e3bf7ab68a22fff6fea486e7f8ad9dea9873b940c9054324f22201dfbdecd812aff0abcc227d6924f7f29ae1ecc74192df6188c35314ec53227") read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000280)="29c270e0b695bd93f3b498eb09ea15098df56969584e9228ccde535ce0bc64a383f0c1567a38130b6b3185d1ad218367eba945c2cce9b73506008d9fbab3f016faf452bc9da7bef7e726c2a8291fe0156b191efcc5d6964a6164a1fbe89fdee504c49dee081c73b14c05a65bb11f6b161774338cdbb0ddc9e2b2830d9a5fa2278f93b4e2") (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000280)="29c270e0b695bd93f3b498eb09ea15098df56969584e9228ccde535ce0bc64a383f0c1567a38130b6b3185d1ad218367eba945c2cce9b73506008d9fbab3f016faf452bc9da7bef7e726c2a8291fe0156b191efcc5d6964a6164a1fbe89fdee504c49dee081c73b14c05a65bb11f6b161774338cdbb0ddc9e2b2830d9a5fa2278f93b4e2") mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)) [ 1782.377694][T23725] fuse: Bad value for 'fd' 01:37:22 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) 01:37:22 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x860001, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x40}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x2}}], [{@uid_lt={'uid<', r0}}]}) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) r4 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x800080, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, 'uid<'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'uid<'}}]}}, 0x0, 0x0, &(0x7f00000004c0)="241455fed34ddaf290984b85149baa64cf60a1b9b6c890754a") renameat2(r3, &(0x7f0000000200)='./file0/file0/file0/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x6) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000780)='{\x00', &(0x7f00000007c0)='./file0/file0\x00', r4) (async, rerun: 64) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0/file0/file0\x00', &(0x7f00000005c0), 0x800000, &(0x7f00000006c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, 'uid<'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x37, 0x64, 0x61, 0x30, 0x0, 0x36], 0x2d, [0x38, 0x32, 0x33, 0x32], 0x2d, [0x31, 0x30, 0x33, 0x65], 0x2d, [0x36, 0x61, 0x36, 0x37], 0x2d, [0x64, 0x64, 0x39, 0x38, 0x38, 0x36, 0x32, 0x32]}}}, {@seclabel}, {@appraise}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@appraise_type}]}}) (async, rerun: 64) readlink(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f00000002c0)=""/140, 0x8c) (rerun: 64) 01:37:22 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async, rerun: 32) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) [ 1782.442850][T23727] 9pnet_virtio: no channels available for device syz [ 1782.484482][ T28] kauditd_printk_skb: 32398 callbacks suppressed [ 1782.484499][ T28] audit: type=1400 audit(1697852242.914:2994653): lsm=SMACK fn=smack_unix_may_send action=granted subject="_" object="_" requested=w pid=4471 comm="klogd" path="/dev/log" [ 1782.498188][T18553] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.508622][T23731] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.516679][T23733] audit: audit_backlog=65 > audit_backlog_limit=64 01:37:22 executing program 2: r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x21c409, &(0x7f0000000500)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x3a00}}, {@max_read={'max_read', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4a}}, {@blksize={'blksize', 0x3d, 0x1200}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}}, 0x0, 0x0, &(0x7f0000000400)="d1e6f5a2e45f7831eb42f3d03245243c7dcc7bbc57b75d14a49ce1b1044546baf45c7c9d376aa15162cb5d84f9efa330ab7778566c37e2d472b6d551a51537e42d31acc0042d9aa4fe6dd2a958ca43a515f32e855485bac552fc96dc4b9ad695080c2d030147019d978dd2725d34f43c870f7103ae2d3b34b4a81c9451c6b080f9699da908a99dff776500969dba587e59b98dc86f133e388260fe2f27629fef8814c51fc273bf69a76a22eed89b9c526f8d6bc09d32f887d6ea5ef2d509bb2184a11898811e58336298f452a7581f5bf027732486d036c4f15e4c3230a86c754133cca7") r1 = openat(r0, &(0x7f0000000240)='./file0\x00', 0x86140, 0x1c0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f0000000040)=""/92, 0x5c, &(0x7f00000000c0)=""/90, 0x0, 0x4}}, 0x48) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, 0x0) [ 1782.522804][ T4482] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.529627][ T5056] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.535945][T23730] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.542460][ T5045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.549436][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.562327][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 01:37:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r2}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e23, 0x7ff8, @mcast1, 0x80e6}, r2}}, 0x38) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f0000000300)={'trans=virtio,', {[{@cache_mmap}, {@cache_fscache}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x30, 0x37, 0x37, 0x61, 0x61, 0x51, 0x63], 0x2d, [0x62, 0x31, 0x62, 0x34], 0x2d, [0x61, 0x36, 0x36, 0x63], 0x2d, [0x62, 0x35, 0x34, 0x63], 0x2d, [0x66, 0x62, 0x30, 0x32, 0x38, 0x31, 0x31, 0x30]}}}]}}) 01:37:23 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) [ 1782.710524][T23742] fuse: Bad value for 'fd' 01:37:23 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$smackfs_label(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2f7d65d5e000001d5f63f4726c0000"], 0xf) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x6, 0x2, {"96d9e8a60b6ae611cec44d4d007dac38"}, 0x6, 0x5, 0x64cf}}}, 0x90) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) 01:37:23 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:23 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002280), 0x84041, 0x0) fstat(r0, &(0x7f00000022c0)) (async) syz_mount_image$fuse(&(0x7f0000002200), &(0x7f0000002240)='./file0\x00', 0x200a000, &(0x7f0000002340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@max_read={'max_read', 0x3d, 0xfff}}]}}, 0x0, 0x0, &(0x7f00000024c0)="015000e3b6183cad0a9177f9788ed32ab839a1f1b8ba6d9d95fbc8692eb3db3edb9819b9f54cd28101c12679bee8e63fccc94dc44b99bfc2018c4da38d3a8f2f5f3d7e1f7c21490d70f97828ff569b823ad704535ac27093ac5f85a2dcc9a10da92fcd9983a514db713d788839ac77fa88fe90df5b5c8b8ff7959586d04ebaf32f4d3646fe8378217e47009080e24de2fe54c5248f1e3d60c911518a9e0b7b7a066ecc85275309aed52e9506c24a218be46eede40b11381f3e3bf7ab68a22fff6fea486e7f8ad9dea9873b940c9054324f22201dfbdecd812aff0abcc227d6924f7f29ae1ecc74192df6188c35314ec53227") read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@audit}, {@measure}]}}, 0x1, 0x0, &(0x7f0000000280)="29c270e0b695bd93f3b498eb09ea15098df56969584e9228ccde535ce0bc64a383f0c1567a38130b6b3185d1ad218367eba945c2cce9b73506008d9fbab3f016faf452bc9da7bef7e726c2a8291fe0156b191efcc5d6964a6164a1fbe89fdee504c49dee081c73b14c05a65bb11f6b161774338cdbb0ddc9e2b2830d9a5fa2278f93b4e2") (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) stat(&(0x7f0000002140)='./file0\x00', &(0x7f0000002180)) [ 1782.826832][T23754] 9pnet_virtio: no channels available for device syz [ 1782.850622][T23751] fuse: Bad value for 'fd' [ 1782.863141][ T4482] EEVDF scheduling fail, picking leftmost [ 1782.863209][ T4482] [ 1782.863215][ T4482] ====================================================== [ 1782.863223][ T4482] WARNING: possible circular locking dependency detected [ 1782.863230][ T4482] 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 Not tainted [ 1782.863241][ T4482] ------------------------------------------------------ [ 1782.863248][ T4482] udevd/4482 is trying to acquire lock: [ 1782.863259][ T4482] ffffffff8d208018 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 1782.863314][ T4482] [ 1782.863314][ T4482] but task is already holding lock: [ 1782.863320][ T4482] ffff8880b983c318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1782.863371][ T4482] [ 1782.863371][ T4482] which lock already depends on the new lock. [ 1782.863371][ T4482] [ 1782.863378][ T4482] [ 1782.863378][ T4482] the existing dependency chain (in reverse order) is: [ 1782.863385][ T4482] [ 1782.863385][ T4482] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 1782.863409][ T4482] _raw_spin_lock_nested+0x31/0x40 [ 1782.863436][ T4482] raw_spin_rq_lock_nested+0x2a/0x140 [ 1782.863462][ T4482] task_fork_fair+0x61/0x1e0 [ 1782.863479][ T4482] sched_cgroup_fork+0x37b/0x410 [ 1782.863508][ T4482] copy_process+0x2841/0x41a0 [ 1782.863536][ T4482] kernel_clone+0x222/0x840 [ 1782.863553][ T4482] user_mode_thread+0x132/0x190 [ 1782.863570][ T4482] rest_init+0x27/0x300 [ 1782.863592][ T4482] arch_call_rest_init+0xe/0x10 [ 1782.863736][ T4482] start_kernel+0x46e/0x4f0 [ 1782.863765][ T4482] x86_64_start_reservations+0x2a/0x30 [ 1782.863792][ T4482] x86_64_start_kernel+0x99/0xa0 [ 1782.863818][ T4482] secondary_startup_64_no_verify+0x167/0x16b [ 1782.863857][ T4482] [ 1782.863857][ T4482] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 1782.863885][ T4482] _raw_spin_lock_irqsave+0xd5/0x120 [ 1782.863919][ T4482] try_to_wake_up+0xb1/0x1300 [ 1782.863948][ T4482] up+0x72/0x90 [ 1782.863967][ T4482] console_unlock+0x22f/0x4d0 [ 1782.863989][ T4482] vprintk_emit+0x508/0x720 [ 1782.864010][ T4482] dev_vprintk_emit+0x2ae/0x330 [ 1782.864036][ T4482] dev_printk_emit+0xdd/0x120 [ 1782.864062][ T4482] _dev_warn+0x122/0x170 [ 1782.864087][ T4482] firmware_fallback_sysfs+0x678/0x950 [ 1782.864168][ T4482] _request_firmware+0xc97/0x1280 [ 1782.864187][ T4482] request_firmware_work_func+0x12a/0x270 [ 1782.864207][ T4482] process_scheduled_works+0x90f/0x1400 [ 1782.864230][ T4482] worker_thread+0xa5f/0xff0 [ 1782.864251][ T4482] kthread+0x2d3/0x370 [ 1782.864266][ T4482] ret_from_fork+0x48/0x80 [ 1782.864287][ T4482] ret_from_fork_asm+0x11/0x20 [ 1782.864313][ T4482] [ 1782.864313][ T4482] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 1782.864342][ T4482] __lock_acquire+0x39ff/0x7f70 [ 1782.864362][ T4482] lock_acquire+0x1e3/0x520 [ 1782.864380][ T4482] _raw_spin_lock_irqsave+0xd5/0x120 [ 1782.864405][ T4482] down_trylock+0x20/0xa0 [ 1782.864425][ T4482] __down_trylock_console_sem+0x109/0x250 [ 1782.864450][ T4482] vprintk_emit+0x1ef/0x720 [ 1782.864471][ T4482] _printk+0xd5/0x120 [ 1782.864490][ T4482] pick_eevdf+0x660/0x690 [ 1782.864509][ T4482] pick_next_task_fair+0x122/0xdc0 [ 1782.864538][ T4482] __schedule+0x7c7/0x4af0 [ 1782.864556][ T4482] preempt_schedule_irq+0xfb/0x1b0 [ 1782.864575][ T4482] irqentry_exit+0x57/0x80 [ 1782.864596][ T4482] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1782.864616][ T4482] __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1782.864640][ T4482] smack_log+0x28d/0x540 [ 1782.864667][ T4482] smk_tskacc+0x2ff/0x360 [ 1782.864693][ T4482] smack_inode_permission+0x2dc/0x380 [ 1782.864715][ T4482] security_inode_permission+0xa1/0xf0 [ 1782.864740][ T4482] link_path_walk+0x2da/0xe70 [ 1782.864765][ T4482] path_lookupat+0xa9/0x450 [ 1782.864784][ T4482] filename_lookup+0x255/0x610 [ 1782.864803][ T4482] vfs_statx+0x10b/0x4c0 [ 1782.864827][ T4482] vfs_fstatat+0x135/0x190 [ 1782.864851][ T4482] __x64_sys_newfstatat+0x117/0x190 [ 1782.864878][ T4482] do_syscall_64+0x41/0xc0 [ 1782.864913][ T4482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1782.864944][ T4482] [ 1782.864944][ T4482] other info that might help us debug this: [ 1782.864944][ T4482] [ 1782.864950][ T4482] Chain exists of: [ 1782.864950][ T4482] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 1782.864950][ T4482] [ 1782.864982][ T4482] Possible unsafe locking scenario: [ 1782.864982][ T4482] [ 1782.864988][ T4482] CPU0 CPU1 [ 1782.864993][ T4482] ---- ---- [ 1782.864999][ T4482] lock(&rq->__lock); [ 1782.865011][ T4482] lock(&p->pi_lock); [ 1782.865024][ T4482] lock(&rq->__lock); [ 1782.865037][ T4482] lock((console_sem).lock); [ 1782.865049][ T4482] [ 1782.865049][ T4482] *** DEADLOCK *** [ 1782.865049][ T4482] [ 1782.865054][ T4482] 1 lock held by udevd/4482: [ 1782.865065][ T4482] #0: ffff8880b983c318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1782.865122][ T4482] [ 1782.865122][ T4482] stack backtrace: [ 1782.865127][ T4482] CPU: 0 PID: 4482 Comm: udevd Not tainted 6.6.0-rc6-syzkaller-00207-gc8045b4a33a5 #0 [ 1782.865148][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1782.865160][ T4482] Call Trace: [ 1782.865168][ T4482] [ 1782.865176][ T4482] dump_stack_lvl+0x1e7/0x2d0 [ 1782.865210][ T4482] ? nf_tcp_handle_invalid+0x650/0x650 [ 1782.865248][ T4482] ? print_circular_bug+0x12b/0x1a0 [ 1782.865275][ T4482] check_noncircular+0x375/0x4a0 [ 1782.865302][ T4482] ? stack_trace_snprint+0xf0/0xf0 [ 1782.865329][ T4482] ? print_deadlock_bug+0x600/0x600 [ 1782.865354][ T4482] ? lockdep_lock+0x123/0x2b0 [ 1782.865379][ T4482] ? mark_lock+0x9a/0x340 [ 1782.865400][ T4482] ? _find_first_zero_bit+0xd4/0x100 [ 1782.865445][ T4482] __lock_acquire+0x39ff/0x7f70 [ 1782.865483][ T4482] ? verify_lock_unused+0x140/0x140 [ 1782.865504][ T4482] ? format_decode+0x6bc/0x1bb0 [ 1782.865536][ T4482] ? vsnprintf+0x1d80/0x1d80 [ 1782.865561][ T4482] ? prb_reserve+0xe34/0x12f0 [ 1782.865589][ T4482] ? vsnprintf+0x943/0x1d80 [ 1782.865615][ T4482] ? __asan_memcpy+0x40/0x70 [ 1782.865646][ T4482] ? vsnprintf+0x1cbb/0x1d80 [ 1782.865678][ T4482] lock_acquire+0x1e3/0x520 [ 1782.865699][ T4482] ? down_trylock+0x20/0xa0 [ 1782.865726][ T4482] ? read_lock_is_recursive+0x20/0x20 [ 1782.865747][ T4482] ? rcu_is_watching+0x15/0xb0 [ 1782.865776][ T4482] ? prb_final_commit+0x6f/0x90 [ 1782.865803][ T4482] ? vprintk_store+0xd3d/0x1160 [ 1782.865834][ T4482] _raw_spin_lock_irqsave+0xd5/0x120 [ 1782.865859][ T4482] ? down_trylock+0x20/0xa0 [ 1782.865881][ T4482] ? _raw_spin_lock+0x40/0x40 [ 1782.865921][ T4482] down_trylock+0x20/0xa0 [ 1782.865946][ T4482] __down_trylock_console_sem+0x109/0x250 [ 1782.865974][ T4482] ? _printk+0xd5/0x120 [ 1782.865995][ T4482] ? console_trylock+0x140/0x140 [ 1782.866020][ T4482] ? verify_lock_unused+0x140/0x140 [ 1782.866043][ T4482] ? verify_lock_unused+0x140/0x140 [ 1782.866065][ T4482] ? verify_lock_unused+0x140/0x140 [ 1782.866089][ T4482] vprintk_emit+0x1ef/0x720 [ 1782.866114][ T4482] ? printk_sprint+0x480/0x480 [ 1782.866137][ T4482] ? __lock_acquire+0x1267/0x7f70 [ 1782.866162][ T4482] ? verify_lock_unused+0x140/0x140 [ 1782.866189][ T4482] _printk+0xd5/0x120 [ 1782.866213][ T4482] ? sched_clock+0x41/0x60 [ 1782.866235][ T4482] ? panic+0x770/0x770 [ 1782.866265][ T4482] pick_eevdf+0x660/0x690 [ 1782.866293][ T4482] pick_next_task_fair+0x122/0xdc0 [ 1782.866329][ T4482] __schedule+0x7c7/0x4af0 [ 1782.866365][ T4482] ? release_firmware_map_entry+0x190/0x190 [ 1782.866390][ T4482] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 1782.866420][ T4482] ? preempt_schedule_irq+0xf0/0x1b0 [ 1782.866443][ T4482] preempt_schedule_irq+0xfb/0x1b0 [ 1782.866466][ T4482] ? preempt_schedule_notrace+0x130/0x130 [ 1782.866487][ T4482] ? common_lsm_audit+0x10a/0x1ad0 [ 1782.866516][ T4482] irqentry_exit+0x57/0x80 [ 1782.866539][ T4482] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1782.866560][ T4482] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 1782.866589][ T4482] Code: 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 15 d0 a7 75 7e 65 8b 05 d1 a7 75 7e a9 00 01 ff 00 74 10 [ 1782.866607][ T4482] RSP: 0018:ffffc9000319f5f8 EFLAGS: 00000246 [ 1782.866624][ T4482] RAX: 0000000000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 1782.866638][ T4482] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1782.866650][ T4482] RBP: ffffc9000319f6d8 R08: ffffffff83fbb0ad R09: 0000000000000000 [ 1782.866664][ T4482] R10: ffffc9000319f7a8 R11: fffff52000633ef9 R12: ffffc9000319f7a0 [ 1782.866679][ T4482] R13: ffffc9000319f660 R14: 1ffff92000633ecc R15: 0000000000000001 [ 1782.866698][ T4482] ? smack_log+0x28d/0x540 [ 1782.866732][ T4482] smack_log+0x28d/0x540 [ 1782.866764][ T4482] ? smk_access+0x4e0/0x4e0 [ 1782.866792][ T4482] ? smk_access+0x4ab/0x4e0 [ 1782.866824][ T4482] smk_tskacc+0x2ff/0x360 [ 1782.866856][ T4482] smack_inode_permission+0x2dc/0x380 [ 1782.866884][ T4482] ? smack_inode_rename+0x310/0x310 [ 1782.866928][ T4482] security_inode_permission+0xa1/0xf0 [ 1782.866957][ T4482] link_path_walk+0x2da/0xe70 [ 1782.866993][ T4482] ? handle_lookup_down+0x130/0x130 [ 1782.867028][ T4482] path_lookupat+0xa9/0x450 [ 1782.867055][ T4482] filename_lookup+0x255/0x610 [ 1782.867082][ T4482] ? hashlen_string+0x110/0x110 [ 1782.867116][ T4482] ? __might_sleep+0xc0/0xc0 [ 1782.867140][ T4482] ? __might_fault+0xa5/0x120 [ 1782.867169][ T4482] ? __lock_acquire+0x7f70/0x7f70 [ 1782.867195][ T4482] vfs_statx+0x10b/0x4c0 [ 1782.867221][ T4482] ? __check_object_size+0x4bb/0xa00 [ 1782.867246][ T4482] ? strncpy_from_user+0x1a5/0x2e0 [ 1782.867266][ T4482] ? vfs_fstatat+0x190/0x190 [ 1782.867295][ T4482] ? mntput_no_expire+0x246/0x850 [ 1782.867320][ T4482] vfs_fstatat+0x135/0x190 [ 1782.867349][ T4482] __x64_sys_newfstatat+0x117/0x190 [ 1782.867381][ T4482] ? __ia32_sys_newlstat+0x170/0x170 [ 1782.867422][ T4482] ? syscall_enter_from_user_mode+0x32/0x230 [ 1782.867447][ T4482] ? lockdep_hardirqs_on+0x98/0x140 [ 1782.867471][ T4482] ? syscall_enter_from_user_mode+0x32/0x230 [ 1782.867498][ T4482] do_syscall_64+0x41/0xc0 [ 1782.867530][ T4482] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1782.867562][ T4482] RIP: 0033:0x7f3fcb3165f4 [ 1782.867580][ T4482] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8 [ 1782.867599][ T4482] RSP: 002b:00007ffd59284868 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1782.867620][ T4482] RAX: ffffffffffffffda RBX: 000055bc52918e10 RCX: 00007f3fcb3165f4 [ 1782.867635][ T4482] RDX: 00007ffd59284878 RSI: 00007ffd59284d08 RDI: 00000000ffffff9c [ 1782.867649][ T4482] RBP: 00007ffd59284908 R08: 0000000000000000 R09: 0000000000000000 [ 1782.867662][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd59284d08 [ 1782.867675][ T4482] R13: 00007ffd59284878 R14: 000055bc528f7910 R15: 0000000000000000 [ 1782.867698][ T4482] 01:37:24 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x2) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 01:37:24 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x860001, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x40}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x2}}], [{@uid_lt={'uid<', r0}}]}) r2 = open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) r4 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x800080, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, 'uid<'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'uid<'}}]}}, 0x0, 0x0, &(0x7f00000004c0)="241455fed34ddaf290984b85149baa64cf60a1b9b6c890754a") renameat2(r3, &(0x7f0000000200)='./file0/file0/file0/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x6) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r5, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000780)='{\x00', &(0x7f00000007c0)='./file0/file0\x00', r4) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0/file0/file0\x00', &(0x7f00000005c0), 0x800000, &(0x7f00000006c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, 'uid<'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x37, 0x64, 0x61, 0x30, 0x0, 0x36], 0x2d, [0x38, 0x32, 0x33, 0x32], 0x2d, [0x31, 0x30, 0x33, 0x65], 0x2d, [0x36, 0x61, 0x36, 0x37], 0x2d, [0x64, 0x64, 0x39, 0x38, 0x38, 0x36, 0x32, 0x32]}}}, {@seclabel}, {@appraise}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@appraise_type}]}}) readlink(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f00000002c0)=""/140, 0x8c) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r0, 0xffffffffffffffff) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), 0x860001, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x40}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x80000001}}, {@mode={'mode', 0x3d, 0x2}}], [{@uid_lt={'uid<', r0}}]}) (async) open(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) (async) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000380)='./file0\x00', 0x800080, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r1}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, 'uid<'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, 'uid<'}}]}}, 0x0, 0x0, &(0x7f00000004c0)="241455fed34ddaf290984b85149baa64cf60a1b9b6c890754a") (async) renameat2(r3, &(0x7f0000000200)='./file0/file0/file0/file0\x00', r4, &(0x7f0000000500)='./file0\x00', 0x6) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r5, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000780)='{\x00', &(0x7f00000007c0)='./file0/file0\x00', r4) (async) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) (async) mount$9p_virtio(&(0x7f0000000540), &(0x7f0000000580)='./file0/file0/file0\x00', &(0x7f00000005c0), 0x800000, &(0x7f00000006c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, 'uid<'}}], [{@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x30, 0x37, 0x64, 0x61, 0x30, 0x0, 0x36], 0x2d, [0x38, 0x32, 0x33, 0x32], 0x2d, [0x31, 0x30, 0x33, 0x65], 0x2d, [0x36, 0x61, 0x36, 0x37], 0x2d, [0x64, 0x64, 0x39, 0x38, 0x38, 0x36, 0x32, 0x32]}}}, {@seclabel}, {@appraise}, {@euid_eq={'euid', 0x3d, r6}}, {@fowner_gt={'fowner>', r0}}, {@uid_gt={'uid>', 0xee01}}, {@appraise_type}]}}) (async) readlink(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f00000002c0)=""/140, 0x8c) (async) 01:37:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x840, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20018, &(0x7f0000000240)={'trans=virtio,', {[{@cachetag}, {@mmap}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) 01:37:24 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:24 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00') (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (rerun: 32) 01:37:24 executing program 1: syz_io_uring_setup(0x5a2a, &(0x7f00000000c0)={0x0, 0x4e9d, 0x80, 0x2, 0x18b}, &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x101) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mknod(&(0x7f0000000340)='./file0\x00', 0x400, 0x1) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000200)=ANY=[@ANYBLOB='/duv/sg0\x00'], r0, &(0x7f0000000300)={0x7fffffffffffffff, 0x80000001, 0x1, 0x4}) [ 1784.175948][T23768] fuse: Bad value for 'fd' 01:37:24 executing program 5: lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x161806, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5ac0000000000000}}], [{@fowner_lt={'fowner<', r1}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000340)="881b9c07c9b9f0ccdacd9381f5de88906aeadfbeeaf55f26a99f5b02401e5a53d899ad6d5828e5073fec5adcbd07280bf6738dd89691544b2b9989ab989190bb2a1ad3699f3aae6dcafa2f993c3eab0fa3d1c047f3e14f1727c84115b5c8c5eefe9fdb12") mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0xa0202, 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="d0a20000000000002e2f6b696c65302f66696c65300005febb74c2fcbede3af1479d135fc3d2066ee76d515e81f1a62860e01bc813ee8af337153cbded92b7da6be89f74cf9fe5bcf570b6fe698ad0f613cc1f2b9bab7efe377153e204"]) 01:37:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x840, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20018, &(0x7f0000000240)={'trans=virtio,', {[{@cachetag}, {@mmap}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) 01:37:24 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) (async) write$sndseq(r1, &(0x7f0000000000), 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$smackfs_label(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2f7d65d5e000001d5f63f4726c0000"], 0xf) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x6, 0x2, {"96d9e8a60b6ae611cec44d4d007dac38"}, 0x6, 0x5, 0x64cf}}}, 0x90) (async) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x6, 0x2, {"96d9e8a60b6ae611cec44d4d007dac38"}, 0x6, 0x5, 0x64cf}}}, 0x90) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) 01:37:24 executing program 5: lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x161806, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5ac0000000000000}}], [{@fowner_lt={'fowner<', r1}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000340)="881b9c07c9b9f0ccdacd9381f5de88906aeadfbeeaf55f26a99f5b02401e5a53d899ad6d5828e5073fec5adcbd07280bf6738dd89691544b2b9989ab989190bb2a1ad3699f3aae6dcafa2f993c3eab0fa3d1c047f3e14f1727c84115b5c8c5eefe9fdb12") mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0xa0202, 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="d0a20000000000002e2f6b696c65302f66696c65300005febb74c2fcbede3af1479d135fc3d2066ee76d515e81f1a62860e01bc813ee8af337153cbded92b7da6be89f74cf9fe5bcf570b6fe698ad0f613cc1f2b9bab7efe377153e204"]) 01:37:24 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:24 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r0, &(0x7f0000000100)='\x00', 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) chdir(&(0x7f0000000000)='./file0\x00') 01:37:24 executing program 1: syz_io_uring_setup(0x5a2a, &(0x7f00000000c0)={0x0, 0x4e9d, 0x80, 0x2, 0x18b}, &(0x7f0000000040), &(0x7f0000000140)) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f) (async) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x101) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mknod(&(0x7f0000000340)='./file0\x00', 0x400, 0x1) (async) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000200)=ANY=[@ANYBLOB='/duv/sg0\x00'], r0, &(0x7f0000000300)={0x7fffffffffffffff, 0x80000001, 0x1, 0x4}) 01:37:24 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x2000, 0x840, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x20018, &(0x7f0000000240)={'trans=virtio,', {[{@cachetag}, {@mmap}, {@access_any}, {@dfltgid={'dfltgid', 0x3d, r0}}], [{@pcr={'pcr', 0x3d, 0x32}}, {@hash}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}, {@context={'context', 0x3d, 'staff_u'}}]}}) 01:37:24 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:24 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 64) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000), 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$smackfs_label(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="2f7d65d5e000001d5f63f4726c0000"], 0xf) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x6, 0x2, {"96d9e8a60b6ae611cec44d4d007dac38"}, 0x6, 0x5, 0x64cf}}}, 0x90) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) 01:37:25 executing program 5: lstat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000140)='./file0/file0\x00', 0x161806, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5ac0000000000000}}], [{@fowner_lt={'fowner<', r1}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}, 0x0, 0x0, &(0x7f0000000340)="881b9c07c9b9f0ccdacd9381f5de88906aeadfbeeaf55f26a99f5b02401e5a53d899ad6d5828e5073fec5adcbd07280bf6738dd89691544b2b9989ab989190bb2a1ad3699f3aae6dcafa2f993c3eab0fa3d1c047f3e14f1727c84115b5c8c5eefe9fdb12") mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0xa0202, 0xc0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="d0a20000000000002e2f6b696c65302f66696c65300005febb74c2fcbede3af1479d135fc3d2066ee76d515e81f1a62860e01bc813ee8af337153cbded92b7da6be89f74cf9fe5bcf570b6fe698ad0f613cc1f2b9bab7efe377153e204"]) 01:37:25 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x400, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x820, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x8000000000000000}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x20}}]}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:25 executing program 1: syz_io_uring_setup(0x5a2a, &(0x7f00000000c0)={0x0, 0x4e9d, 0x80, 0x2, 0x18b}, &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000001c0)='./file0\x00', 0x200, 0x1f) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x101) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mknod(&(0x7f0000000340)='./file0\x00', 0x400, 0x1) (async) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000200)=ANY=[@ANYBLOB='/duv/sg0\x00'], r0, &(0x7f0000000300)={0x7fffffffffffffff, 0x80000001, 0x1, 0x4}) 01:37:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) 01:37:25 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:25 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x400, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x820, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x8000000000000000}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x20}}]}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$smackfs_logging(0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x14) 01:37:25 executing program 0: r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r0, &(0x7f0000000100)='\x00', 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) fspick(r0, &(0x7f0000000100)='\x00', 0x1) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) 01:37:25 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6c628b8deed31a289a88cad14252b99de6569700b0980000f665d0b810066ca920179678831776036dc3950b0c057eb31ee47b14e704a44e8d7aaeaf936c4e5589f8cad3bcc12c65b0fe9a8e6edda3851543954d6a53bb5f8d00dd93785a10a53ed6dc805b51"], 0xee00, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@nullb, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 01:37:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) write$smackfs_logging(0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x14) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$smackfs_logging(0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x14) (async) 01:37:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3800) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) 01:37:25 executing program 3: mknod(&(0x7f0000000140)='./file0\x00', 0x400, 0x0) (async) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x820, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x8000000000000000}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x20}}]}) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:25 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) r2 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0, r1}}, './file2\x00'}) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 01:37:25 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6c628b8deed31a289a88cad14252b99de6569700b0980000f665d0b810066ca920179678831776036dc3950b0c057eb31ee47b14e704a44e8d7aaeaf936c4e5589f8cad3bcc12c65b0fe9a8e6edda3851543954d6a53bb5f8d00dd93785a10a53ed6dc805b51"], 0xee00, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@nullb, r0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@nullb, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 01:37:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fspick(r0, &(0x7f0000000100)='\x00', 0x1) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) chdir(&(0x7f0000000000)='./file0\x00') 01:37:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) write$smackfs_logging(0xffffffffffffffff, &(0x7f0000000000)=0x2, 0x14) 01:37:25 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) quotactl$Q_QUOTAOFF(0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="6c6c628b8deed31a289a88cad14252b99de6569700b0980000f665d0b810066ca920179678831776036dc3950b0c057eb31ee47b14e704a44e8d7aaeaf936c4e5589f8cad3bcc12c65b0fe9a8e6edda3851543954d6a53bb5f8d00dd93785a10a53ed6dc805b51"], 0xee00, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000140)=@nullb, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) 01:37:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3800) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) 01:37:25 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0, r1}}, './file2\x00'}) (async) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r4, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) 01:37:25 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1b180b0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6664a2", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,max_read=0x000000000000a30a,max_read=0x0000800000000000,blksize=0x0000000000000200,default_permissions,max_read=0x0000000000000005,default_permissions,allow_other,smackfstransmute=^}!(,pcr=00000000000000000032,euid>', @ANYRESDEC=r0, @ANYBLOB=',fscontext=unconfined_u,defcontext=user_u,obj_user=,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_appraise,\x00'], 0x0, 0x0, &(0x7f00000004c0)="6b9d837a1f28466a121206aa73482a2f063a29501d16a28c7df520e7f858c8d0dc9cf7df38b80a816895d0e8fa2c3a54a49f943d12ea753d6f686730e091b27b2e242de3584ad4dfddaaede857d89ade2ab5b076f362e19b79b571747b432b80ee22a5ce2e8272ff901063c1371bd0c49f635533e2dfa0e6c37baebadfa91efc0cca190bdbd239005a3c0a7a009a181520b2052edc5d404f7cfd20745e8c7a9dbab192799c35") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600)}}, 0x18) openat(r2, &(0x7f0000000580)='./file0\x00', 0xa100, 0x4) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000180)={'trans=unix,', {[{@loose}, {@debug={'debug', 0x3d, 0xcd}}, {@fscache}, {@posixacl}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@msize={'msize', 0x3d, 0x9}}], [{@smackfsroot}]}}) 01:37:25 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f0000000000)='./file0\x00') 01:37:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x48b83, 0x0) 01:37:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:37:25 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) r2 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0, r1}}, './file2\x00'}) r4 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0), 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', r0, 0xee01) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r0, r1}}, './file2\x00'}) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r4, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) (async) 01:37:25 executing program 0: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb5, 0x100) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x50002010}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:25 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x7) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1b180b0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6664a2", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,max_read=0x000000000000a30a,max_read=0x0000800000000000,blksize=0x0000000000000200,default_permissions,max_read=0x0000000000000005,default_permissions,allow_other,smackfstransmute=^}!(,pcr=00000000000000000032,euid>', @ANYRESDEC=r0, @ANYBLOB=',fscontext=unconfined_u,defcontext=user_u,obj_user=,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_appraise,\x00'], 0x0, 0x0, &(0x7f00000004c0)="6b9d837a1f28466a121206aa73482a2f063a29501d16a28c7df520e7f858c8d0dc9cf7df38b80a816895d0e8fa2c3a54a49f943d12ea753d6f686730e091b27b2e242de3584ad4dfddaaede857d89ade2ab5b076f362e19b79b571747b432b80ee22a5ce2e8272ff901063c1371bd0c49f635533e2dfa0e6c37baebadfa91efc0cca190bdbd239005a3c0a7a009a181520b2052edc5d404f7cfd20745e8c7a9dbab192799c35") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600)}}, 0x18) (async, rerun: 32) openat(r2, &(0x7f0000000580)='./file0\x00', 0xa100, 0x4) (async, rerun: 32) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000180)={'trans=unix,', {[{@loose}, {@debug={'debug', 0x3d, 0xcd}}, {@fscache}, {@posixacl}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@msize={'msize', 0x3d, 0x9}}], [{@smackfsroot}]}}) 01:37:25 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:37:25 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) chdir(&(0x7f0000000000)='./file0\x00') 01:37:25 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0/file0\x00', 0x48b83, 0x0) 01:37:26 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$nfs4(&(0x7f0000000280)='syz\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100004, &(0x7f0000000340)={[{'privport'}, {'privport'}, {'F(\').%#.\\!'}, {'[[@'}, {'[^\\-!'}, {'obj_type'}, {}], [{@fsname={'fsname', 0x3d, '{])'}}, {@smackfsroot={'smackfsroot', 0x3d, '.%{]&@*'}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '@),'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200c004, &(0x7f00000001c0)={'trans=xen,', {[{@privport}, {@msize={'msize', 0x3d, 0xfffffffffffffffe}}, {@fscache}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.%{]&@*'}}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@access_client}, {@access_user}], [{@obj_type}]}}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x48b83, 0x0) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0/file0\x00', 0x48b83, 0x0) (async) 01:37:26 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x1b180b0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6664a2", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB=',default_permissions,max_read=0x000000000000a30a,max_read=0x0000800000000000,blksize=0x0000000000000200,default_permissions,max_read=0x0000000000000005,default_permissions,allow_other,smackfstransmute=^}!(,pcr=00000000000000000032,euid>', @ANYRESDEC=r0, @ANYBLOB=',fscontext=unconfined_u,defcontext=user_u,obj_user=,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_appraise,\x00'], 0x0, 0x0, &(0x7f00000004c0)="6b9d837a1f28466a121206aa73482a2f063a29501d16a28c7df520e7f858c8d0dc9cf7df38b80a816895d0e8fa2c3a54a49f943d12ea753d6f686730e091b27b2e242de3584ad4dfddaaede857d89ade2ab5b076f362e19b79b571747b432b80ee22a5ce2e8272ff901063c1371bd0c49f635533e2dfa0e6c37baebadfa91efc0cca190bdbd239005a3c0a7a009a181520b2052edc5d404f7cfd20745e8c7a9dbab192799c35") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000640)={0x1, 0x10, 0xfa00, {&(0x7f0000000600)}}, 0x18) (async) openat(r2, &(0x7f0000000580)='./file0\x00', 0xa100, 0x4) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000180)={'trans=unix,', {[{@loose}, {@debug={'debug', 0x3d, 0xcd}}, {@fscache}, {@posixacl}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r0}}, {@msize={'msize', 0x3d, 0x9}}], [{@smackfsroot}]}}) 01:37:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) 01:37:26 executing program 0: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb5, 0x100) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x50002010}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) 01:37:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) chdir(&(0x7f0000000000)='./file0\x00') 01:37:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8881, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180a000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x206000, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x4}) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1, 0x1000) r2 = epoll_create(0x10001) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff07000000de13012e2f66696c653000"]) 01:37:26 executing program 3: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1001052, &(0x7f0000000240)={'trans=xen,', {[{@version_9p2000}, {@version_u}, {@cache_loose}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_type={'obj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@fsname={'fsname', 0x3d, '{{'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x14a) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x49) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8881, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180a000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x206000, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x4}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8881, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180a000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x206000, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x4}) (async) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1, 0x1000) r2 = epoll_create(0x10001) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff07000000de13012e2f66696c653000"]) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40, &(0x7f00000000c0)) (async) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1, 0x1000) (async) epoll_create(0x10001) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff07000000de13012e2f66696c653000"]) (async) 01:37:26 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) mount$nfs4(&(0x7f0000000280)='syz\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100004, &(0x7f0000000340)={[{'privport'}, {'privport'}, {'F(\').%#.\\!'}, {'[[@'}, {'[^\\-!'}, {'obj_type'}, {}], [{@fsname={'fsname', 0x3d, '{])'}}, {@smackfsroot={'smackfsroot', 0x3d, '.%{]&@*'}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '@),'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200c004, &(0x7f00000001c0)={'trans=xen,', {[{@privport}, {@msize={'msize', 0x3d, 0xfffffffffffffffe}}, {@fscache}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.%{]&@*'}}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@access_client}, {@access_user}], [{@obj_type}]}}) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (rerun: 32) [ 1785.872888][T23913] 9pnet: Could not find request transport: xen 01:37:26 executing program 0: faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb5, 0x100) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x50002010}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xb5, 0x100) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x50002010}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) 01:37:26 executing program 3: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1001052, &(0x7f0000000240)={'trans=xen,', {[{@version_9p2000}, {@version_u}, {@cache_loose}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_type={'obj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@fsname={'fsname', 0x3d, '{{'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x14a) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x49) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) (async) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1001052, &(0x7f0000000240)={'trans=xen,', {[{@version_9p2000}, {@version_u}, {@cache_loose}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_type={'obj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@fsname={'fsname', 0x3d, '{{'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r0, 0x0, 0x0) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r1, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESHEX=r1], 0x14a) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x49) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1, 0x1000) r2 = epoll_create(0x10001) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff07000000de13012e2f66696c653000"]) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) statx(r0, &(0x7f0000000080)='./file0\x00', 0x2000, 0x40, &(0x7f00000000c0)) (async) fchownat(r0, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, r1, 0x1000) (async) epoll_create(0x10001) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ff07000000de13012e2f66696c653000"]) (async) 01:37:26 executing program 3: mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8, 0x103) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000440)=@sr0, r0, 0x0) mount$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='/dev/ubi_ctrl\x00,{&,!\'-*#-C:}.&,memory.pressure\x00,/dev/ubi_ctrl\x00,:%,memory.pressure\x00,euid<', @ANYRESDEC, @ANYBLOB="2c66736e616d653d2f6465762f7562695f6374726c002c7065726d69745f646972656374696f2c0094d3bc1f380ab2459712a3995186c927968ff7f2b1def73dc9358c1982f1c9"]) open(&(0x7f0000000000)='./file0/file0\x00', 0x68b02, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r1, &(0x7f0000000700)='./file0\x00', 0x800, 0x2, &(0x7f0000000600)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x4a00, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000380)={'trans=xen,', {[{@cache_mmap}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x63, 0x61, 0x36, 0x34, 0x0, 0x39], 0x2d, [0x38, 0x62, 0x32, 0x39], 0x2d, [0x37, 0x34, 0x38, 0x64], 0x2d, [0x33, 0x39, 0x39, 0x35], 0x2d, [0x66, 0x33, 0x32, 0x61, 0x63, 0x65, 0x36, 0x33]}}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_lt={'fowner<', r3}}]}}) mknodat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x8, 0x2) 01:37:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x8881, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000180a000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async, rerun: 32) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x206000, 0x0) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x4}) 01:37:26 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x1, 0x0) (async, rerun: 64) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1001052, &(0x7f0000000240)={'trans=xen,', {[{@version_9p2000}, {@version_u}, {@cache_loose}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsroot={'smackfsroot', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@obj_type={'obj_type', 0x3d, '/sys/fs/smackfs/revoke-subject\x00'}}, {@fsname={'fsname', 0x3d, '{{'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) (async, rerun: 64) r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r0, 0x0, 0x0) (async, rerun: 32) r1 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 32) write$smackfs_label(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f7562695f6374726c00203a7d5e00202f7379732f66732f736d61636b66732f7265766f6b652d7375626a65637400202f6465762f7562695f6374726c000a8b5ec54dc5c046aff419a5db9f804ee8066d27765bbb6a19d689d73ad45f4c6c6e36f756f902f1d3b8a569cc30590565ca95705388962c838c0fe9f84c78ad2a76db1df7dfe6ba3cc11eeeec1af4d99cd0c17fdd9f52da2c261e67612b8a17aa16d54924388c6e2370be2ad80fb5923ba2597252e0d76ef5e3fb9620d1535143f654f8d513b283dffdd64a2d692301203879362fe56e0807ee098c60002c131a882662a0e497e956bbcb52d7ba581e72772cd1fd07992821ebc4b1ad02077d7d66f4b225c103ac8e68b10e20ddcc29d57911779204a8f4f29dc5748a2f7180d51d071dada064b50e761a9934a4e00600000000000000d61e1566594f", @ANYRES16=r1, @ANYRESHEX=r1], 0x14a) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r2], 0x49) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r3}}, 0x18) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) [ 1786.224934][T23939] 9pnet: Could not find request transport: xen 01:37:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000008}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000100)={0x1, 0x20, 0x80, 0x20, 0x49a}, 0x48) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:26 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xef000) syz_io_uring_setup(0x6bee, &(0x7f0000000100)={0x0, 0x82a2, 0x4, 0x2, 0x1de, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000040)="57290976597fa95172c3ea48e0ac238d94ab2c927c0e7f8345786ed6598a78c287860c72774e2d6320ea5ee20af1cb2ef8da0efb472256f6b5ee06c6fea2dbe4b784f7868ca6b8d2a8291fe65e6d67b20a94c29bf1f6aa472a3ef04eba74f6b77b7a67515a0fec6010e178308b952687cbcb", 0x72) read$smackfs_logging(r1, &(0x7f00000000c0), 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:26 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000440)=@sr0, r0, 0x0) (async) mount$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='/dev/ubi_ctrl\x00,{&,!\'-*#-C:}.&,memory.pressure\x00,/dev/ubi_ctrl\x00,:%,memory.pressure\x00,euid<', @ANYRESDEC, @ANYBLOB="2c66736e616d653d2f6465762f7562695f6374726c002c7065726d69745f646972656374696f2c0094d3bc1f380ab2459712a3995186c927968ff7f2b1def73dc9358c1982f1c9"]) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x68b02, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) statx(r1, &(0x7f0000000700)='./file0\x00', 0x800, 0x2, &(0x7f0000000600)) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x4a00, 0x0) (async) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000380)={'trans=xen,', {[{@cache_mmap}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x63, 0x61, 0x36, 0x34, 0x0, 0x39], 0x2d, [0x38, 0x62, 0x32, 0x39], 0x2d, [0x37, 0x34, 0x38, 0x64], 0x2d, [0x33, 0x39, 0x39, 0x35], 0x2d, [0x66, 0x33, 0x32, 0x61, 0x63, 0x65, 0x36, 0x33]}}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_lt={'fowner<', r3}}]}}) (async) mknodat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x8, 0x2) [ 1786.449361][T23939] 9pnet: Could not find request transport: xen [ 1786.660654][T23939] 9pnet: Could not find request transport: xen [ 1786.712697][T23939] 9pnet: Could not find request transport: xen [ 1786.775080][T23939] 9pnet: Could not find request transport: xen [ 1786.840256][T23939] 9pnet: Could not find request transport: xen [ 1786.872246][T23939] 9pnet: Could not find request transport: xen 01:37:27 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$nfs4(&(0x7f0000000280)='syz\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x100004, &(0x7f0000000340)={[{'privport'}, {'privport'}, {'F(\').%#.\\!'}, {'[[@'}, {'[^\\-!'}, {'obj_type'}, {}], [{@fsname={'fsname', 0x3d, '{])'}}, {@smackfsroot={'smackfsroot', 0x3d, '.%{]&@*'}}, {@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '@),'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200c004, &(0x7f00000001c0)={'trans=xen,', {[{@privport}, {@msize={'msize', 0x3d, 0xfffffffffffffffe}}, {@fscache}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@uname={'uname', 0x3d, '.%{]&@*'}}, {@dfltgid={'dfltgid', 0x3d, r0}}, {@access_client}, {@access_user}], [{@obj_type}]}}) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lchown(&(0x7f0000000180)='./file0/file0\x00', r1, r0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 01:37:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB="726f2caaebb92b33466e5194ee572bf7e14f22c1f148c30703c33202fe34c42bd929fb3b210a8e24df8f2ee8e045e829657fabb1e48bbaffeb97a68c72d715796cd0a7d1f8e94414ef4892f628976035c503c3c8fdbc65"]) 01:37:27 executing program 2: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xef000) (async) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xef000) syz_io_uring_setup(0x6bee, &(0x7f0000000100)={0x0, 0x82a2, 0x4, 0x2, 0x1de, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) (async) syz_io_uring_setup(0x6bee, &(0x7f0000000100)={0x0, 0x82a2, 0x4, 0x2, 0x1de, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000040)="57290976597fa95172c3ea48e0ac238d94ab2c927c0e7f8345786ed6598a78c287860c72774e2d6320ea5ee20af1cb2ef8da0efb472256f6b5ee06c6fea2dbe4b784f7868ca6b8d2a8291fe65e6d67b20a94c29bf1f6aa472a3ef04eba74f6b77b7a67515a0fec6010e178308b952687cbcb", 0x72) read$smackfs_logging(r1, &(0x7f00000000c0), 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 01:37:27 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000440)=@sr0, r0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000440)=@sr0, r0, 0x0) mount$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='/dev/ubi_ctrl\x00,{&,!\'-*#-C:}.&,memory.pressure\x00,/dev/ubi_ctrl\x00,:%,memory.pressure\x00,euid<', @ANYRESDEC, @ANYBLOB="2c66736e616d653d2f6465762f7562695f6374726c002c7065726d69745f646972656374696f2c0094d3bc1f380ab2459712a3995186c927968ff7f2b1def73dc9358c1982f1c9"]) (async) mount$pvfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='/dev/ubi_ctrl\x00,{&,!\'-*#-C:}.&,memory.pressure\x00,/dev/ubi_ctrl\x00,:%,memory.pressure\x00,euid<', @ANYRESDEC, @ANYBLOB="2c66736e616d653d2f6465762f7562695f6374726c002c7065726d69745f646972656374696f2c0094d3bc1f380ab2459712a3995186c927968ff7f2b1def73dc9358c1982f1c9"]) open(&(0x7f0000000000)='./file0/file0\x00', 0x68b02, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x68b02, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) statx(r1, &(0x7f0000000700)='./file0\x00', 0x800, 0x2, &(0x7f0000000600)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000580), 0x4a00, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000000, &(0x7f0000000380)={'trans=xen,', {[{@cache_mmap}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x61, 0x63, 0x61, 0x36, 0x34, 0x0, 0x39], 0x2d, [0x38, 0x62, 0x32, 0x39], 0x2d, [0x37, 0x34, 0x38, 0x64], 0x2d, [0x33, 0x39, 0x39, 0x35], 0x2d, [0x66, 0x33, 0x32, 0x61, 0x63, 0x65, 0x36, 0x33]}}}, {@euid_lt={'euid<', 0xee00}}, {@fowner_lt={'fowner<', r3}}]}}) mknodat(r2, &(0x7f0000000040)='./file0/file0\x00', 0x8, 0x2) 01:37:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000008}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$tcp_mem(r2, &(0x7f0000000100)={0x1, 0x20, 0x80, 0x20, 0x49a}, 0x48) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB="726f2caaebb92b33466e5194ee572bf7e14f22c1f148c30703c33202fe34c42bd929fb3b210a8e24df8f2ee8e045e829657fabb1e48bbaffeb97a68c72d715796cd0a7d1f8e94414ef4892f628976035c503c3c8fdbc65"]) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB="726f2caaebb92b33466e5194ee572bf7e14f22c1f148c30703c33202fe34c42bd929fb3b210a8e24df8f2ee8e045e829657fabb1e48bbaffeb97a68c72d715796cd0a7d1f8e94414ef4892f628976035c503c3c8fdbc65"]) (async) 01:37:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000180)='./file0/file0\x00', r1, r0) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 01:37:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xef000) syz_io_uring_setup(0x6bee, &(0x7f0000000100)={0x0, 0x82a2, 0x4, 0x2, 0x1de, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) write$qrtrtun(r1, &(0x7f0000000040)="57290976597fa95172c3ea48e0ac238d94ab2c927c0e7f8345786ed6598a78c287860c72774e2d6320ea5ee20af1cb2ef8da0efb472256f6b5ee06c6fea2dbe4b784f7868ca6b8d2a8291fe65e6d67b20a94c29bf1f6aa472a3ef04eba74f6b77b7a67515a0fec6010e178308b952687cbcb", 0x72) read$smackfs_logging(r1, &(0x7f00000000c0), 0x14) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x501000, 0x0) (async) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x100010, r1, 0xef000) (async) syz_io_uring_setup(0x6bee, &(0x7f0000000100)={0x0, 0x82a2, 0x4, 0x2, 0x1de, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000200)) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$smackfs_label(r2, 0x0, 0x0) (async) write$qrtrtun(r1, &(0x7f0000000040)="57290976597fa95172c3ea48e0ac238d94ab2c927c0e7f8345786ed6598a78c287860c72774e2d6320ea5ee20af1cb2ef8da0efb472256f6b5ee06c6fea2dbe4b784f7868ca6b8d2a8291fe65e6d67b20a94c29bf1f6aa472a3ef04eba74f6b77b7a67515a0fec6010e178308b952687cbcb", 0x72) (async) read$smackfs_logging(r1, &(0x7f00000000c0), 0x14) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) 01:37:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000008}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r2, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$tcp_mem(r2, &(0x7f0000000100)={0x1, 0x20, 0x80, 0x20, 0x49a}, 0x48) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c65302f66696c653000c6b04b315aefd1627c9386416bc8d4bc6196534edc9c81b394e3d84f2c3a410f5806c91649e884c5aa0acefcd44fe1f2db425a35f1b4003465656bac0b944f6bf60c5beeb137bbe7348a07fee50b71f16ea730d39d21dde64a2eee73123ae76918ba52f651535ea3526799ed37e04e8b4177a426c07300824b7bf7"]) io_uring_setup(0x6af, &(0x7f0000000080)={0x0, 0x426f, 0x2, 0x3, 0x10, 0x0, r0}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x6) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) chroot(&(0x7f0000000000)='./file0\x00') [ 1787.151311][T24008] 9pnet: Could not find request transport: xen 01:37:27 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xe0002002}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) 01:37:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40000, &(0x7f00000000c0)=ANY=[@ANYBLOB="726f2caaebb92b33466e5194ee572bf7e14f22c1f148c30703c33202fe34c42bd929fb3b210a8e24df8f2ee8e045e829657fabb1e48bbaffeb97a68c72d715796cd0a7d1f8e94414ef4892f628976035c503c3c8fdbc65"]) 01:37:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c65302f66696c653000c6b04b315aefd1627c9386416bc8d4bc6196534edc9c81b394e3d84f2c3a410f5806c91649e884c5aa0acefcd44fe1f2db425a35f1b4003465656bac0b944f6bf60c5beeb137bbe7348a07fee50b71f16ea730d39d21dde64a2eee73123ae76918ba52f651535ea3526799ed37e04e8b4177a426c07300824b7bf7"]) io_uring_setup(0x6af, &(0x7f0000000080)={0x0, 0x426f, 0x2, 0x3, 0x10, 0x0, r0}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lchown(&(0x7f0000000180)='./file0/file0\x00', r1, r0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fstat(0xffffffffffffffff, &(0x7f00000000c0)) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000180)='./file0/file0\x00', r1, r0) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) 01:37:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x6) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) chroot(&(0x7f0000000000)='./file0\x00') 01:37:27 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async, rerun: 64) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xe0002002}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) 01:37:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) 01:37:27 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:27 executing program 5: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66696c65302f66696c653000c6b04b315aefd1627c9386416bc8d4bc6196534edc9c81b394e3d84f2c3a410f5806c91649e884c5aa0acefcd44fe1f2db425a35f1b4003465656bac0b944f6bf60c5beeb137bbe7348a07fee50b71f16ea730d39d21dde64a2eee73123ae76918ba52f651535ea3526799ed37e04e8b4177a426c07300824b7bf7"]) io_uring_setup(0x6af, &(0x7f0000000080)={0x0, 0x426f, 0x2, 0x3, 0x10, 0x0, r0}) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:27 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 01:37:27 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x6) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) chroot(&(0x7f0000000000)='./file0\x00') mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x440000, 0x0) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x6) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) (async) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) (async) chroot(&(0x7f0000000000)='./file0\x00') (async) [ 1787.492997][ T28] kauditd_printk_skb: 61934 callbacks suppressed [ 1787.493015][ T28] audit: type=1400 audit(1697852247.904:3015480): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=4482 comm="udevd" path="/sys/devices/virtual/block/loop0" dev="sysfs" ino=14432 [ 1787.493305][ T5048] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1787.499399][ T28] audit: type=1400 audit(1697852247.914:3015483): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=24055 comm="syz-executor.4" name="395" dev="sda1" ino=1951 [ 1787.536833][ T4471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1787.547560][ T5056] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1787.554001][ T4471] audit: audit_lost=1046209 audit_rate_limit=0 audit_backlog_limit=64 [ 1787.554018][ T4471] audit: backlog limit exceeded [ 1787.554131][T24057] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1787.560661][T24053] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1787.573360][T24059] audit: audit_backlog=66 > audit_backlog_limit=64 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0/file0', [{0x20, '#\''}], 0xa, "081e9e72aa7edfc274d8527652b2381defaa7af864d3e6087d27ed2897ce32ecbd6ccfb5952313270a0b90aa12c64c51241e4a82e3e9"}, 0x4a) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xe0002002}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0xe0002002}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) (async) 01:37:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000240)={'trans=virtio,', {[{@noextend}, {@cache_fscache}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@cache_loose}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@euid_gt}, {@pcr={'pcr', 0x3d, 0x12}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '@'}}]}}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20000, 0x133) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x401, 0x1, 0x4}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x0) 01:37:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) 01:37:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0/file0', [{0x20, '#\''}], 0xa, "081e9e72aa7edfc274d8527652b2381defaa7af864d3e6087d27ed2897ce32ecbd6ccfb5952313270a0b90aa12c64c51241e4a82e3e9"}, 0x4a) (async) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 01:37:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000080, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_role={'obj_role', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_gt}, {@fowner_gt}, {@obj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}]}}, 0x1, 0x0, &(0x7f0000000080)="a46692697d2985aff5597492e007a81cc2638cada02f1ddc3c5851d6cabbb17c82ef95acf8db064b67a64ae877b402b7ece12e320cdc8e3a6a4b3098a02f08c0cd1a0d4fe720d3ce73e40518afc31fdaaac2c449c3b2b0fdaf22da1c6cb3951685efe0ec9fa05f665ba8354406797874b3075152ce401d945d30726634b497d64209fe05852e46ed8c86cf1a64d2c6d159a6c02b55adb9a04e9ecf12df253c445465f3734190") r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x80800, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x48) mknodat$null(r1, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r7, 0x1}}, 0x18) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x843, 0x101) chroot(&(0x7f00000004c0)='./file0\x00') 01:37:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) r0 = fsopen(&(0x7f0000000000)='romfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee01) (async) fsopen(&(0x7f0000000000)='romfs\x00', 0x1) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='/\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) (async) 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0/file0', [{0x20, '#\''}], 0xa, "081e9e72aa7edfc274d8527652b2381defaa7af864d3e6087d27ed2897ce32ecbd6ccfb5952313270a0b90aa12c64c51241e4a82e3e9"}, 0x4a) (async, rerun: 32) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (rerun: 32) [ 1787.934555][T24095] fuse: Bad value for 'fd' 01:37:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000240)={'trans=virtio,', {[{@noextend}, {@cache_fscache}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@cache_loose}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@euid_gt}, {@pcr={'pcr', 0x3d, 0x12}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '@'}}]}}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') (async) r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) (async) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20000, 0x133) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x401, 0x1, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x0) 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 01:37:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) (async) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) (async) 01:37:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000080, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_role={'obj_role', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_gt}, {@fowner_gt}, {@obj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}]}}, 0x1, 0x0, &(0x7f0000000080)="a46692697d2985aff5597492e007a81cc2638cada02f1ddc3c5851d6cabbb17c82ef95acf8db064b67a64ae877b402b7ece12e320cdc8e3a6a4b3098a02f08c0cd1a0d4fe720d3ce73e40518afc31fdaaac2c449c3b2b0fdaf22da1c6cb3951685efe0ec9fa05f665ba8354406797874b3075152ce401d945d30726634b497d64209fe05852e46ed8c86cf1a64d2c6d159a6c02b55adb9a04e9ecf12df253c445465f3734190") r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x80800, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x48) mknodat$null(r1, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r7, 0x1}}, 0x18) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) openat(r2, &(0x7f0000000500)='./file1\x00', 0x843, 0x101) chroot(&(0x7f00000004c0)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000080, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_role={'obj_role', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_gt}, {@fowner_gt}, {@obj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}]}}, 0x1, 0x0, &(0x7f0000000080)="a46692697d2985aff5597492e007a81cc2638cada02f1ddc3c5851d6cabbb17c82ef95acf8db064b67a64ae877b402b7ece12e320cdc8e3a6a4b3098a02f08c0cd1a0d4fe720d3ce73e40518afc31fdaaac2c449c3b2b0fdaf22da1c6cb3951685efe0ec9fa05f665ba8354406797874b3075152ce401d945d30726634b497d64209fe05852e46ed8c86cf1a64d2c6d159a6c02b55adb9a04e9ecf12df253c445465f3734190") (async) openat(r1, &(0x7f0000000400)='./file0\x00', 0x80800, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) openat(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x48) (async) mknodat$null(r1, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) (async) openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540), 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r7, 0x1}}, 0x18) (async) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r5, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async) openat(r2, &(0x7f0000000500)='./file1\x00', 0x843, 0x101) (async) chroot(&(0x7f00000004c0)='./file0\x00') (async) 01:37:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000), 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=""/6, 0x6) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x102, 0x88) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)=' ', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 01:37:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000240)={'trans=virtio,', {[{@noextend}, {@cache_fscache}, {@msize={'msize', 0x3d, 0xffffffffffffffff}}, {@cache_loose}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}], [{@euid_gt}, {@pcr={'pcr', 0x3d, 0x12}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '@'}}]}}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) chdir(&(0x7f0000000380)='./file0\x00') r2 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x40, 0x8) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x20000, 0x133) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x401, 0x1, 0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3f}}, 0x10) (async) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x0) 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x4}}, 0x20) 01:37:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000), 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=""/6, 0x6) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x102, 0x88) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)=' ', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=""/6, 0x6) (async) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x102, 0x88) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)=' ', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) (async) 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) [ 1788.200213][T24119] fuse: Bad value for 'fd' [ 1788.256267][T24124] fuse: Bad value for 'fd' 01:37:28 executing program 2: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000080, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@obj_role={'obj_role', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_gt}, {@fowner_gt}, {@obj_role}, {@smackfstransmute={'smackfstransmute', 0x3d, '/sys/kernel/debug/sync/sw_sync\x00'}}]}}, 0x1, 0x0, &(0x7f0000000080)="a46692697d2985aff5597492e007a81cc2638cada02f1ddc3c5851d6cabbb17c82ef95acf8db064b67a64ae877b402b7ece12e320cdc8e3a6a4b3098a02f08c0cd1a0d4fe720d3ce73e40518afc31fdaaac2c449c3b2b0fdaf22da1c6cb3951685efe0ec9fa05f665ba8354406797874b3075152ce401d945d30726634b497d64209fe05852e46ed8c86cf1a64d2c6d159a6c02b55adb9a04e9ecf12df253c445465f3734190") r2 = openat(r1, &(0x7f0000000400)='./file0\x00', 0x80800, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x4000, 0x48) (async) mknodat$null(r1, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) (async) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r6, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000800)={0x5, 0x10, 0xfa00, {&(0x7f0000000600), r7, 0x1}}, 0x18) (async) lchown(&(0x7f0000000080)='./file0\x00', r5, 0xffffffffffffffff) (async) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) (async, rerun: 64) openat(r2, &(0x7f0000000500)='./file1\x00', 0x843, 0x101) (async, rerun: 64) chroot(&(0x7f00000004c0)='./file0\x00') 01:37:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x6) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{',]\xe4'}, {']!\''}], [{@appraise_type}, {@measure}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) open(&(0x7f00000001c0)='./file0\x00', 0x400800, 0x70) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x4}}, 0x20) 01:37:28 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) write$FUSE_GETXATTR(r0, &(0x7f0000000200)={0x18, 0x0, r2, {0x4}}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$nfs4(&(0x7f0000000000)='ro', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100008, &(0x7f0000000180)={[{'bpf\x00'}, {'*+'}], [{@obj_type={'obj_type', 0x3d, 'ro'}}, {@appraise}]}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="34fe17cb5a79b617b8698d3e62a8bb5098d1391813ecab5f7b1d3610def9927e907c48c1c9e9d13ba0096c84d315e82cdf36d72c6608d1a7f7547cb7835e00460175e884da62e20a84f4521b31d8e3e89f193b866561cc77c6c37cddc79fedff61123c4546e449cc736873738652cfb448fc28aa4a19350bbc01430807184767fe3923da76571594ea4c25c8e86f174cd8bcfc300b8c"]) 01:37:28 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) write$damon_contexts(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) readlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=""/6, 0x6) (async) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x102, 0x88) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000180)=' ', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 01:37:28 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 1788.491197][T24154] nfs4: Bad value for 'source' 01:37:28 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x4}}, 0x20) 01:37:28 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x6) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{',]\xe4'}, {']!\''}], [{@appraise_type}, {@measure}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) open(&(0x7f00000001c0)='./file0\x00', 0x400800, 0x70) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x6) (async) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{',]\xe4'}, {']!\''}], [{@appraise_type}, {@measure}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) (async) open(&(0x7f00000001c0)='./file0\x00', 0x400800, 0x70) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) [ 1788.512647][T24152] fuse: Bad value for 'fd' 01:37:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x180) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='lrootmode=00000000000000\x00\x000040\t\x00user_id=\x00\x00', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000200,allow_other,obj_user=,appraise_type=imasig,smackfsdef=$},\x00'], 0x1, 0x0, &(0x7f0000000200)="d48392084975606eb49fa2f940b0fc94373684bef7fbbe661f2d5a456670c1e0") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$smackfs_cipsonum(r1, &(0x7f0000000240)=0x6, 0x14) 01:37:29 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) 01:37:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x40, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:37:29 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) write$FUSE_GETXATTR(r0, &(0x7f0000000200)={0x18, 0x0, r2, {0x4}}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$nfs4(&(0x7f0000000000)='ro', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100008, &(0x7f0000000180)={[{'bpf\x00'}, {'*+'}], [{@obj_type={'obj_type', 0x3d, 'ro'}}, {@appraise}]}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="34fe17cb5a79b617b8698d3e62a8bb5098d1391813ecab5f7b1d3610def9927e907c48c1c9e9d13ba0096c84d315e82cdf36d72c6608d1a7f7547cb7835e00460175e884da62e20a84f4521b31d8e3e89f193b866561cc77c6c37cddc79fedff61123c4546e449cc736873738652cfb448fc28aa4a19350bbc01430807184767fe3923da76571594ea4c25c8e86f174cd8bcfc300b8c"]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x80) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000100)={0x2020}, 0x2020) (async) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) (async) write$FUSE_GETXATTR(r0, &(0x7f0000000200)={0x18, 0x0, r2, {0x4}}, 0x18) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) mount$nfs4(&(0x7f0000000000)='ro', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100008, &(0x7f0000000180)={[{'bpf\x00'}, {'*+'}], [{@obj_type={'obj_type', 0x3d, 'ro'}}, {@appraise}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="34fe17cb5a79b617b8698d3e62a8bb5098d1391813ecab5f7b1d3610def9927e907c48c1c9e9d13ba0096c84d315e82cdf36d72c6608d1a7f7547cb7835e00460175e884da62e20a84f4521b31d8e3e89f193b866561cc77c6c37cddc79fedff61123c4546e449cc736873738652cfb448fc28aa4a19350bbc01430807184767fe3923da76571594ea4c25c8e86f174cd8bcfc300b8c"]) (async) [ 1788.733618][T24174] nfs4: Bad value for 'source' 01:37:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x180) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='lrootmode=00000000000000\x00\x000040\t\x00user_id=\x00\x00', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000200,allow_other,obj_user=,appraise_type=imasig,smackfsdef=$},\x00'], 0x1, 0x0, &(0x7f0000000200)="d48392084975606eb49fa2f940b0fc94373684bef7fbbe661f2d5a456670c1e0") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$smackfs_cipsonum(r1, &(0x7f0000000240)=0x6, 0x14) mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x180) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='lrootmode=00000000000000\x00\x000040\t\x00user_id=\x00\x00', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000200,allow_other,obj_user=,appraise_type=imasig,smackfsdef=$},\x00'], 0x1, 0x0, &(0x7f0000000200)="d48392084975606eb49fa2f940b0fc94373684bef7fbbe661f2d5a456670c1e0") (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) write$smackfs_cipsonum(r1, &(0x7f0000000240)=0x6, 0x14) (async) [ 1788.778113][T24174] nfs4: Bad value for 'source' 01:37:29 executing program 3: mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) (async) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x1, 0x6) (async) mount$nfs4(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{',]\xe4'}, {']!\''}], [{@appraise_type}, {@measure}, {@audit}, {@fowner_eq={'fowner', 0x3d, 0xee00}}]}) (async) open(&(0x7f00000001c0)='./file0\x00', 0x400800, 0x70) (async, rerun: 32) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) (rerun: 32) 01:37:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) [ 1788.863068][ T5062] Bluetooth: hci2: command 0x0406 tx timeout 01:37:29 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x80) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f0000002580)={0x20, 0x0, r2}, 0x20) (async) write$FUSE_GETXATTR(r0, &(0x7f0000000200)={0x18, 0x0, r2, {0x4}}, 0x18) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) mount$nfs4(&(0x7f0000000000)='ro', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100008, &(0x7f0000000180)={[{'bpf\x00'}, {'*+'}], [{@obj_type={'obj_type', 0x3d, 'ro'}}, {@appraise}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="34fe17cb5a79b617b8698d3e62a8bb5098d1391813ecab5f7b1d3610def9927e907c48c1c9e9d13ba0096c84d315e82cdf36d72c6608d1a7f7547cb7835e00460175e884da62e20a84f4521b31d8e3e89f193b866561cc77c6c37cddc79fedff61123c4546e449cc736873738652cfb448fc28aa4a19350bbc01430807184767fe3923da76571594ea4c25c8e86f174cd8bcfc300b8c"]) 01:37:29 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) 01:37:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 01:37:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x180) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB='lrootmode=00000000000000\x00\x000040\t\x00user_id=\x00\x00', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',blksize=0x0000000000000200,allow_other,obj_user=,appraise_type=imasig,smackfsdef=$},\x00'], 0x1, 0x0, &(0x7f0000000200)="d48392084975606eb49fa2f940b0fc94373684bef7fbbe661f2d5a456670c1e0") lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) write$smackfs_cipsonum(r1, &(0x7f0000000240)=0x6, 0x14) (async) write$smackfs_cipsonum(r1, &(0x7f0000000240)=0x6, 0x14) 01:37:29 executing program 3: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffe}}, './file1\x00'}) mmap$fb(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x300000f, 0x12, r0, 0x26000) mknod(&(0x7f00000023c0)='./file0\x00', 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000380)="437f336e095fa80467eea96e90a3449cc0b4698d709438d0dcf76c62e333fe232c099b28dfb629b151986fe730540f2be7b3df60a46f7009db2e20a9bb58a713fa0c721b1e1b99db6688534ca4dbd26699d9487c2183dfb8e2467ab61ae61854af5134113059138a64afe51a0b06a5dcac13f5a9e1ec72b770b07f1377f5148aaccecc0c9b43f1ab16bc92c557f49d819900cc008c0d66b9eca2999582", 0x9d) r2 = fsopen(&(0x7f0000000580)='configfs\x00', 0x1) fcntl$getown(r2, 0x9) lchown(&(0x7f0000000080)='./file0\x00', r1, 0xffffffffffffffff) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r4, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x4) mount$9p_xen(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f0000000280)={'trans=xen,', {[{@version_u}, {@version_9p2000}, {@posixacl}], [{@permit_directio}, {@dont_appraise}]}}) openat$cgroup_pressure(r3, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) mount_setattr(r3, &(0x7f0000000000)='./file0\x00', 0x11900, &(0x7f0000000040)={0x4, 0x100074}, 0x20) r5 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_label(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="5f52468203000000000000002e2f6669"]) mknodat$null(r4, &(0x7f0000000500)='./file0\x00', 0x8000, 0x103) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000480)='[$\x00', &(0x7f00000004c0)='./file1\x00', r3) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r7, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) faccessat2(r7, &(0x7f0000000100)='./file0\x00', 0x189, 0x1000) 01:37:29 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) (async) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) 01:37:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[], [{@flag='ro'}]}) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f00000005c0)='memory.pressure\x00', 0x2, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000004ddd4f65180000005093386691d654502513405086fbc79562de45382a6dfce9bc8d4cc25dff3db5f88ed88076eee3353026b7", @ANYRES32=r1, @ANYBLOB="01000000000000002e2f66696c653100"]) 01:37:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x0) (async) mknod(&(0x7f00000023c0)='./file0\x00', 0x80, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x142, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x2) 01:37:29 executing program 1: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/87, 0x57) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) chdir(&(0x7f00000001c0)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x6000) 01:37:29 executing program 5: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0xc000, 0x103) open(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x96) 01:37:29 executing program 4: mknod(&(0x7f00000023c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x142, 0x0) 01: