last executing test programs: 1m45.043862732s ago: executing program 3 (id=2929): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r3}, 0x10) setreuid(0x0, 0x0) socket(0x2c, 0x6, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.985583649s ago: executing program 3 (id=2932): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 1m43.847761141s ago: executing program 3 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000200)={0x18, 0x1f, 0x0, {0x1400000000000}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000300)={0x50, 0x24, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}}, 0x50) getresuid(&(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000380)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 1m43.752667902s ago: executing program 3 (id=2943): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@nolazytime}, {@nombcache}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}], [], 0x2c}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb3, @void, @value}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ptrace$getregset(0x4204, r0, 0x6, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0xa18c14, &(0x7f0000000340)=ANY=[@ANYBLOB='uni_xlate=1rset=iso8859-9,shortname=winnt,codepage=1251,nonumtail=0,iocharset=cp850,uni_xlate=0,nonumtail=0,shortname=lower,shortname=mixed,shortname=winnt,rodir,iocharlYqset=koi8-r'], 0x81, 0x29b, &(0x7f0000000580)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) socket(0x10, 0x803, 0x0) chdir(0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m37.54039974s ago: executing program 3 (id=2968): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getegid() getpgrp(r0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m35.829383547s ago: executing program 3 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1m35.777713618s ago: executing program 32 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1m8.526904848s ago: executing program 1 (id=3154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r7 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r7, r8, 0x30, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m7.434538125s ago: executing program 1 (id=3161): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x2, &(0x7f0000000000)=""/182, 0xb6) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m5.004887194s ago: executing program 1 (id=3175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000740)='mm_page_alloc\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x1, 0x200, '\x00\b\x00', 0x0, 0x3}) 1m4.919463605s ago: executing program 1 (id=3178): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@nolazytime}, {@nombcache}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}], [], 0x2c}) 1m3.434613748s ago: executing program 1 (id=3181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x60, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 1m1.747674055s ago: executing program 1 (id=3187): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r5, 0x0, 0x3f00) 1m1.663417087s ago: executing program 33 (id=3187): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) getdents64(r5, 0x0, 0x3f00) 7.862633756s ago: executing program 2 (id=3386): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getegid() getpgrp(r0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 7.149923737s ago: executing program 6 (id=3388): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@discard}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2080000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@debug}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}]}, 0x0, 0x46b, &(0x7f0000000740)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSeOjpQWVhRuNJi4wmugCl7UdSMNADa2JECLFGNyYGBJdG5cm/gXujIlRVyZudW9IiLIBXdXcO/fCdJgpFKa9lfl8kmnPufdMz/n23Me558wE0LNGsh9JxLaI+C0ihhrZ5QVGGr+uXTk7/feVs9NJLC299WeSl7t65ex0WbR839YiM5pGpB8nRSXLzZ8+c3yqXq+dKvLjCyfeG58/febZ2RNTx2rHaicnDx06eGDihecnn+tKnFlcV/d8OLd392vvXHx9+sjFd3/6JmvvtmJ/cxzdMpIF/tdSrnXfk92urGLbm9JJf4UNYVX6IiLrroH8/B+KvrjReUPx6keVNg5YU9m9aVPn3YtLwD0siapbAFSjvNFnz7/la52GHhvC5ZcaD0BZ3NeKV2NPf6RFmYGW59tuGomII4v/fJm9Yo3mIQAAmn06/cXheKbd+C+NB5rK7SjWUIYj4v8RsTMi7ouIXRFxf0Re9sGIeGiV9bcuDd08/kkv3VFgtykb/71YrG0tH/+Vo78Y7ity2/P4B5Kjs/Xa/uJ/MhoDm7L8xAp1fPfKr5912tc8/steWf3lWLBox6X+lgm6mamFqXxQ2gWXz0fs6W8Xf3J9JSCJiN0RsWd1f3pHmZh96uu9nQrdOv4VdGGdaemrLLzFLP7FaIm/lKy8Pjm+Oeq1/ePlUXGzn3+58Gan+u8q/i64XGv8bur/1iLDSfN67fzq67jw+ycdn2nu8PhPB5O3834ZLLZ9MLWwcGoiYjA5nOeXbZ+88d4yX5bPjv/Rfe3P/53Fe7J6Ho6I7CB+JCIejYjHirY/HhFPRMS+FeL/8eXO+8r4I62o/89HzLS9/l0//lv6f/WJvuM/fNup/tvr/4N5arTYkl//bqFdc7LLRWsD7+Z/BwAAAP8Vaf4Z+CQdu55O07Gxxmf4d8X/0vrc/MLTR+fePznT+Kz8cAyk5UzXUDEfWp+t1yaSxeIvNuZHJ4u54nK+9EAxb/x535Y8PzY9V5+pOHbodVs7nP+ZP/qqbh2wxra03To5uO4NASrQuo6eLs+ee2M9GwOsK9/Xht51i/M/Xa92AOvP/R96V7vz/1xL3loA3Jvc/6F3Of+hR6XfV90CoELu/9CT7uZ7/WuY2LwxmlFNYqN2Sp6IKBPphmiPxBolqr4yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMe/AQAA///Zjesq") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_open_procfs(r0, &(0x7f0000000040)='timerslack_ns\x00') 6.887438121s ago: executing program 4 (id=3391): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, 0x0, 0x66, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_setup(0x7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 6.472806048s ago: executing program 0 (id=3393): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 6.039934294s ago: executing program 0 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 6.015918945s ago: executing program 6 (id=3395): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 5.736451699s ago: executing program 2 (id=3396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r0}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.644473121s ago: executing program 4 (id=3397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) 5.508360773s ago: executing program 4 (id=3399): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0xf5, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000020940)={0x2020}, 0x2020) preadv(r5, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1, 0x80000001, 0x3) read$rfkill(r5, &(0x7f0000000300), 0x8) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) 5.09178877s ago: executing program 0 (id=3400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) r7 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r7, r8, 0x30, &(0x7f0000000040)={0x27, 0x10001, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.997390361s ago: executing program 2 (id=3401): bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.520699289s ago: executing program 6 (id=3402): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x1, 0x0, 0x0) 4.307291052s ago: executing program 6 (id=3403): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.306355672s ago: executing program 6 (id=3404): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r2}, 0x10) setreuid(0x0, 0x0) socket(0x2c, 0x6, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.048005026s ago: executing program 2 (id=3405): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.971075297s ago: executing program 2 (id=3406): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getegid() getpgrp(r0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$eJzsmb+LE0EUx78zu9mchwg2FjYWHniit9ndqFxzRQRLQYiilsGsIbpJJFkhCQgGGxtLC8HWxtLCwsrCv8BWCxUEC1PaCSMzO7s7JpsQf2BE3wdu7jszb+fNe7DfYgOCIP5bPrz/8u7B2d2LJwHsxxbKev2TlcdwI/7to9snHu6de/zszZNX3QN3XsyexwAIsXp+B8DLmoUYzE5Wvn96y7iC1rgEjuNaXwaDm8ivQpFMQjBc1TE3DN3bp0UUutd6UfN6Owo9OfhyCORQNfPLS00nDE0AG+p2QjBjfzAa32xEUdifFSWR5pnb+lGxrH/qfjWOPaTdE0I268r9exM5172BB571zweHr3UVDHWtd1GG67p5S4z6D9v5+dYq9a9XPFXi4M6fSpq+I39D7f+wKP2Wc9jsinyhs5VD09QDzZiPa6/954UyLgBzW683o+j8L5zsFDQqE7k/SWc/ZviTDTvzj0rcuVUZjMY77U6jFbbCbhBUz3inPO90UFFGlIxL/G9D+dOmcX5pQazDHAwbcdz3h0Dc97N5kIyG49af9z6rZ7jyP47to2qqPFWVXS7OwfQfV/+l2raKI+8urIkgCIIgCIIgCIIgCIIgCKKYI2BIfgkTTH8QLSK4oL5QfgsAAP//g4hmcg==") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.932431907s ago: executing program 5 (id=3407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 3.876073119s ago: executing program 4 (id=3408): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, 0x0, 0x66, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_setup(0x7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 1.389839488s ago: executing program 4 (id=3409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) epoll_create1(0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40a02, 0x0) write$binfmt_aout(r5, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') lseek(r6, 0xae7d, 0x0) read$FUSE(r6, &(0x7f0000001300)={0x2020}, 0x2020) 1.119838282s ago: executing program 5 (id=3410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x4884) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x60, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r5, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @sit={{0x8}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 760.007678ms ago: executing program 5 (id=3411): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0) 404.972463ms ago: executing program 5 (id=3412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r0}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 270.471426ms ago: executing program 0 (id=3413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x1, 0x0, 0x0) 178.050497ms ago: executing program 5 (id=3414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) unshare(0x22020600) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 176.577507ms ago: executing program 2 (id=3415): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 121.801088ms ago: executing program 0 (id=3416): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 114.290558ms ago: executing program 4 (id=3417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, 0x0, 0x10) 80.546509ms ago: executing program 5 (id=3418): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xead, 0x0, 0x0, 0x0, 0xffff0000}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0xf5, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r6, &(0x7f0000020940)={0x2020}, 0x2020) preadv(r6, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1, 0x80000001, 0x3) read$rfkill(r6, &(0x7f0000000300), 0x8) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) 1.51753ms ago: executing program 0 (id=3419): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, 0x0, 0x66, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_setup(0x7, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 0s ago: executing program 6 (id=3420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) kernel console output (not intermixed with test programs): -1: config 179 interface 65 has no altsetting 0 [ 410.137410][ T2496] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 410.146480][ T2496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.174805][ T7753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 410.192920][ T323] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 410.202170][ T323] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 410.205497][ T2496] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input4 [ 410.226498][ T7785] loop2: detected capacity change from 0 to 512 [ 410.303332][ T30] audit: type=1400 audit(1743712828.815:1716): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.497704][ T30] audit: type=1400 audit(1743712828.815:1717): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 410.535483][ T7785] EXT4-fs (loop2): 1 orphan inode deleted [ 410.541139][ T7785] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 410.561842][ T7785] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.584505][ T2496] usb 1-1: USB disconnect, device number 11 [ 410.602322][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 410.611578][ T2496] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 411.783074][ T7794] loop1: detected capacity change from 0 to 40427 [ 411.810065][ T7794] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 411.818154][ T7794] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 411.829427][ T7794] F2FS-fs (loop1): Found nat_bits in checkpoint [ 412.231381][ T7794] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 412.238846][ T7794] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 412.677283][ T7794] attempt to access beyond end of device [ 412.677283][ T7794] loop1: rw=2049, want=53256, limit=40427 [ 413.249603][ T292] attempt to access beyond end of device [ 413.249603][ T292] loop1: rw=2049, want=45104, limit=40427 [ 413.546107][ T7824] device batadv_slave_0 left promiscuous mode [ 414.434744][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 414.451464][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.470713][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 414.490030][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.500381][ T7823] loop2: detected capacity change from 0 to 256 [ 414.501614][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 414.514661][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.533166][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.542494][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.559322][ T7823] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.574546][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 414.762062][ T7836] loop0: detected capacity change from 0 to 512 [ 414.883252][ T7836] EXT4-fs (loop0): 1 orphan inode deleted [ 414.889047][ T7836] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 414.909770][ T7836] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.999437][ T7847] loop1: detected capacity change from 0 to 256 [ 415.088656][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 415.097953][ T7853] device batadv_slave_0 entered promiscuous mode [ 416.888817][ T7874] device batadv_slave_0 left promiscuous mode [ 417.462971][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 417.999647][ T7881] loop3: detected capacity change from 0 to 256 [ 418.034993][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.072198][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 418.094744][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.112767][ T7881] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 418.190251][ T7877] loop4: detected capacity change from 0 to 40427 [ 418.197814][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.206382][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.215074][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.231727][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.240122][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 418.254107][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'. [ 418.264231][ T7877] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 418.272135][ T7877] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 418.285984][ T7877] F2FS-fs (loop4): invalid crc value [ 418.294502][ T7877] F2FS-fs (loop4): Found nat_bits in checkpoint [ 418.355112][ T7877] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 418.364330][ T7877] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 418.442639][ T7905] loop2: detected capacity change from 0 to 512 [ 418.622018][ T7905] EXT4-fs (loop2): 1 orphan inode deleted [ 418.627658][ T7905] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 418.648355][ T7905] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 418.762834][ T7230] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 418.772492][ T7230] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 419.250580][ T7923] syz.1.2548[7923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.250686][ T7923] syz.1.2548[7923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.263468][ T7923] loop1: detected capacity change from 0 to 16 [ 419.359959][ T7923] erofs: (device loop1): mounted with root inode @ nid 36. [ 420.125065][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 420.546566][ T7948] loop1: detected capacity change from 0 to 40427 [ 420.631348][ T7948] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 420.654403][ T7948] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 420.749655][ T7948] F2FS-fs (loop1): invalid crc value [ 420.760873][ T7948] F2FS-fs (loop1): Found nat_bits in checkpoint [ 420.807713][ T7948] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 420.814946][ T7948] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.153985][ T30] audit: type=1326 audit(1743712839.020:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.224332][ T30] audit: type=1326 audit(1743712839.048:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.305999][ T30] audit: type=1326 audit(1743712839.048:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.337069][ T30] audit: type=1326 audit(1743712839.048:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.399179][ T30] audit: type=1326 audit(1743712839.048:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.550593][ T30] audit: type=1326 audit(1743712839.048:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.683200][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2565'. [ 421.701875][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 421.712700][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 421.781870][ T30] audit: type=1326 audit(1743712839.048:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 421.809571][ T30] audit: type=1326 audit(1743712839.170:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 422.687521][ T30] audit: type=1326 audit(1743712839.170:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7966 comm="syz.2.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32dc1ff169 code=0x7ffc0000 [ 422.836664][ T30] audit: type=1326 audit(1743712840.592:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 423.543395][ T8007] loop3: detected capacity change from 0 to 40427 [ 423.603787][ T8007] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 423.613443][ T8007] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 423.624165][ T8007] F2FS-fs (loop3): invalid crc value [ 423.636281][ T8007] F2FS-fs (loop3): Found nat_bits in checkpoint [ 423.676952][ T655] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 423.705755][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2577'. [ 423.747100][ T8007] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 423.754732][ T8007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 423.954886][ T655] usb 2-1: Using ep0 maxpacket: 16 [ 424.083254][ T655] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.105042][ T655] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.133743][ T655] usb 2-1: config 0 interface 0 has no altsetting 0 [ 424.153398][ T655] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 424.180544][ T655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.222622][ T655] usb 2-1: config 0 descriptor?? [ 424.621098][ T7230] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 424.631017][ T7230] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 424.864179][ T655] usbhid 2-1:0.0: can't add hid device: -71 [ 424.870624][ T655] usbhid: probe of 2-1:0.0 failed with error -71 [ 424.976446][ T655] usb 2-1: USB disconnect, device number 9 [ 426.192388][ T8053] fuse: Unknown parameter 'grou00000000000000000000' [ 426.304664][ T8062] loop4: detected capacity change from 0 to 256 [ 426.340473][ T8062] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 426.921075][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 426.937727][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2600'. [ 428.035905][ T8091] fuse: Unknown parameter 'grou00000000000000000000' [ 428.161543][ T8096] loop4: detected capacity change from 0 to 512 [ 428.649812][ T8096] EXT4-fs (loop4): 1 orphan inode deleted [ 428.655452][ T8096] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 428.676224][ T8096] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.997173][ T8092] loop1: detected capacity change from 0 to 40427 [ 429.062402][ T8092] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 429.075702][ T8092] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 429.086558][ T8092] F2FS-fs (loop1): invalid crc value [ 429.093317][ T8116] loop0: detected capacity change from 0 to 256 [ 429.093614][ T8092] F2FS-fs (loop1): Found nat_bits in checkpoint [ 429.210925][ T8092] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 429.218252][ T8092] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 429.255879][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 429.273414][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 429.317710][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2613'. [ 429.814339][ T8136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2616'. [ 430.086011][ T8142] fuse: Unknown parameter 'grou00000000000000000000' [ 432.519535][ T8154] loop1: detected capacity change from 0 to 512 [ 432.590718][ T8159] loop4: detected capacity change from 0 to 256 [ 432.616174][ T8161] incfs: Can't find or create .index dir in ./file0 [ 432.622841][ T8161] incfs: mount failed -5 [ 432.721394][ T8154] EXT4-fs (loop1): 1 orphan inode deleted [ 432.727010][ T8154] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 432.747708][ T8154] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.061505][ T8176] loop4: detected capacity change from 0 to 4096 [ 433.292060][ T8176] EXT4-fs (loop4): Test dummy encryption mode enabled [ 433.617039][ T8176] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 433.882848][ T8185] syz.3.2635[8185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.882935][ T8185] syz.3.2635[8185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.896420][ T8187] fuse: Bad value for 'fd' [ 434.055203][ T8188] loop0: detected capacity change from 0 to 128 [ 434.117004][ T8200] loop2: detected capacity change from 0 to 256 [ 434.389511][ T8204] incfs: Can't find or create .index dir in ./file0 [ 434.396556][ T8204] incfs: mount failed -5 [ 435.169934][ T8188] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.180425][ T8188] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.434558][ T8208] loop2: detected capacity change from 0 to 512 [ 435.550509][ T8208] EXT4-fs (loop2): 1 orphan inode deleted [ 435.556233][ T8208] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 435.576881][ T8208] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.649591][ T8224] syz.3.2648[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.649669][ T8224] syz.3.2648[8224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 435.681296][ T8226] fuse: Unknown parameter 'group_i00000000000000000000' [ 436.034214][ T8236] loop1: detected capacity change from 0 to 4096 [ 436.092026][ T8236] EXT4-fs (loop1): Test dummy encryption mode enabled [ 436.179675][ T8236] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 436.815501][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 436.833806][ T8255] loop2: detected capacity change from 0 to 256 [ 436.897490][ T8259] syz.3.2660[8259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 436.897576][ T8259] syz.3.2660[8259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 437.758526][ T8267] fuse: Unknown parameter 'group_i00000000000000000000' [ 438.687910][ T8288] syz.2.2671[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.687996][ T8288] syz.2.2671[8288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 438.791227][ T8300] fuse: Unknown parameter 'group_id00000000000000000000' [ 439.163215][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 439.493818][ T8304] loop3: detected capacity change from 0 to 4096 [ 439.565623][ T8304] EXT4-fs (loop3): Test dummy encryption mode enabled [ 439.932705][ T8304] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 440.174983][ T8316] incfs: Error accessing: ./file0. [ 440.223204][ T8316] incfs: mount failed -20 [ 440.289923][ T8323] syz.1.2682[8323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.290049][ T8323] syz.1.2682[8323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.354770][ T8323] 9pnet: Could not find request transport: fd0x0000000000000004 [ 440.745662][ T8296] syz.2.2672[8296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.746714][ T8296] syz.2.2672[8296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.824736][ T8296] loop2: detected capacity change from 0 to 16 [ 441.821067][ T8319] loop0: detected capacity change from 0 to 40427 [ 441.859308][ T8319] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 441.868376][ T8296] erofs: (device loop2): mounted with root inode @ nid 36. [ 441.917439][ T8319] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 441.942813][ T8319] F2FS-fs (loop0): invalid crc value [ 442.089688][ T8319] F2FS-fs (loop0): Found nat_bits in checkpoint [ 442.669147][ T8319] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 442.676148][ T8319] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 442.795262][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2688'. [ 443.978079][ T8362] incfs: Error accessing: ./file0. [ 444.089396][ T8362] incfs: mount failed -20 [ 444.141215][ T8368] syz.3.2694[8368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.141358][ T8368] syz.3.2694[8368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.597625][ T323] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 444.599431][ T8368] 9pnet: Could not find request transport: fd0x0000000000000004 [ 444.618818][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'. [ 444.634658][ T323] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 444.717400][ T8365] device batadv_slave_0 entered promiscuous mode [ 445.084964][ T8374] loop3: detected capacity change from 0 to 40427 [ 445.189168][ T8374] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 445.209970][ T8374] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 445.219800][ T8374] F2FS-fs (loop3): invalid crc value [ 445.250236][ T8374] F2FS-fs (loop3): Found nat_bits in checkpoint [ 445.285813][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 445.331283][ T8374] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 445.346013][ T8374] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 445.397428][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2701'. [ 445.410447][ T8397] syz.2.2699[8397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 445.410555][ T8397] syz.2.2699[8397] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.341619][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 448.389026][ T8408] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 448.404385][ T8408] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 448.404732][ T8414] syz.0.2706[8414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.426053][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 448.426448][ T8414] syz.0.2706[8414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 448.456422][ T8415] 9pnet: Could not find request transport: fd0x0000000000000003 [ 449.260369][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 449.260422][ T30] audit: type=1400 audit(1743712865.314:1743): avc: denied { map } for pid=8432 comm="syz.0.2712" path="/dev/ashmem" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 449.437522][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 450.017939][ T8426] loop3: detected capacity change from 0 to 40427 [ 450.105808][ T8443] loop1: detected capacity change from 0 to 40427 [ 450.112692][ T8426] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 450.120695][ T8426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 450.136901][ T8426] F2FS-fs (loop3): invalid crc value [ 450.143906][ T8426] F2FS-fs (loop3): Found nat_bits in checkpoint [ 450.150704][ T8443] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 450.160555][ T8443] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 450.181203][ T8443] F2FS-fs (loop1): invalid crc value [ 450.205299][ T8443] F2FS-fs (loop1): Found nat_bits in checkpoint [ 450.236283][ T8454] syz.2.2718[8454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.236364][ T8454] syz.2.2718[8454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.250602][ T8454] 9pnet: Insufficient options for proto=fd [ 450.264715][ T8426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 450.278385][ T8426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 450.288350][ T8443] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 450.295488][ T8443] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 454.114269][ T8465] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 454.136205][ T8465] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 454.301046][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 454.313383][ T8475] fuse: Bad value for 'fd' [ 454.409322][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 454.434757][ T313] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 454.789320][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 454.855686][ T8499] syz.3.2729[8499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.855769][ T8499] syz.3.2729[8499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.870985][ T8499] 9pnet: Insufficient options for proto=fd [ 454.988509][ T8502] loop0: detected capacity change from 0 to 256 [ 455.003377][ T30] audit: type=1400 audit(1743712870.683:1744): avc: denied { remount } for pid=8503 comm="syz.3.2731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 455.023788][ T8504] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 455.033594][ T8502] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 455.120369][ T8504] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 455.212152][ T8509] loop3: detected capacity change from 0 to 512 [ 455.286859][ T8509] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 455.304746][ T8510] syz.2.2728[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.304857][ T8510] syz.2.2728[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 455.317264][ T8510] loop2: detected capacity change from 0 to 16 [ 455.375313][ T8510] erofs: (device loop2): mounted with root inode @ nid 36. [ 455.389388][ T8509] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 455.433248][ T8509] SELinux: duplicate or incompatible mount options [ 456.498856][ T8518] syz.1.2734[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.498941][ T8518] syz.1.2734[8518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.522934][ T8518] 9pnet: Insufficient options for proto=fd [ 457.040561][ T8522] syz.2.2733[8522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.040806][ T8522] syz.2.2733[8522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 457.055108][ T8522] loop2: detected capacity change from 0 to 16 [ 457.118767][ T8522] erofs: (device loop2): mounted with root inode @ nid 36. [ 457.956499][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2738'. [ 458.157350][ T8520] loop4: detected capacity change from 0 to 40427 [ 458.230289][ T8520] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 458.261110][ T8520] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 458.287068][ T8520] F2FS-fs (loop4): invalid crc value [ 458.488247][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2741'. [ 458.516729][ T8520] F2FS-fs (loop4): Found nat_bits in checkpoint [ 458.632245][ T8558] loop0: detected capacity change from 0 to 128 [ 458.830068][ T8558] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.841119][ T8558] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.876678][ T8558] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2743'. [ 458.916134][ T8520] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 458.927206][ T8520] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 459.408817][ T8564] loop2: detected capacity change from 0 to 512 [ 459.732704][ T8564] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 459.912201][ T8564] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 459.925542][ T8564] SELinux: duplicate or incompatible mount options [ 460.020709][ T8569] syz.3.2747[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.020794][ T8569] syz.3.2747[8569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.035733][ T8569] 9pnet: Insufficient options for proto=fd [ 460.693465][ T313] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 460.720582][ T313] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 460.790033][ T8575] loop1: detected capacity change from 0 to 256 [ 460.893599][ T8575] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 461.158300][ T328] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 461.478928][ T328] usb 1-1: Using ep0 maxpacket: 16 [ 461.489913][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 461.607288][ T328] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.618386][ T328] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.628349][ T328] usb 1-1: config 0 interface 0 has no altsetting 0 [ 461.635234][ T328] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 461.644459][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.653739][ T328] usb 1-1: config 0 descriptor?? [ 461.969650][ T8606] syz.1.2760[8606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.969732][ T8606] syz.1.2760[8606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.984490][ T8606] 9pnet: Insufficient options for proto=fd [ 462.441174][ T328] usbhid 1-1:0.0: can't add hid device: -71 [ 462.447203][ T328] usbhid: probe of 1-1:0.0 failed with error -71 [ 462.457203][ T328] usb 1-1: USB disconnect, device number 12 [ 462.962388][ T8629] syz.0.2767[8629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 462.962448][ T8629] syz.0.2767[8629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.024600][ T8635] syz.1.2771[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.035863][ T8635] syz.1.2771[8635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 463.051172][ T8635] 9pnet: Insufficient options for proto=fd [ 463.245628][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 464.593976][ T8667] syz.1.2781[8667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.594062][ T8667] syz.1.2781[8667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.754048][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'. [ 464.819819][ T8671] incfs_lookup_dentry err:-5 [ 464.824260][ T8671] incfs: Can't find or create .index dir in ./file0 [ 464.844281][ T8671] incfs: mount failed -5 [ 464.920231][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2782'. [ 465.116214][ T30] audit: type=1326 audit(1743712880.150:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.164935][ T30] audit: type=1326 audit(1743712880.150:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.209613][ T30] audit: type=1326 audit(1743712880.215:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.233207][ T30] audit: type=1326 audit(1743712880.215:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.256544][ T30] audit: type=1326 audit(1743712880.215:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.280034][ T30] audit: type=1326 audit(1743712880.215:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.316055][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2791'. [ 465.334826][ T30] audit: type=1326 audit(1743712880.299:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.356245][ T8699] syz.1.2793[8699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.358210][ T30] audit: type=1326 audit(1743712880.299:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.0.2790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 465.374101][ T8699] syz.1.2793[8699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.479700][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 465.668858][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 465.678061][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2797'. [ 465.819036][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2795'. [ 466.188441][ T30] audit: type=1326 audit(1743712881.141:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 466.236261][ T30] audit: type=1326 audit(1743712881.169:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8725 comm="syz.0.2804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74a5a7d169 code=0x7ffc0000 [ 466.355287][ T8731] 9p: Unknown uid 18446744073709551615 [ 466.561035][ T8724] loop4: detected capacity change from 0 to 40427 [ 466.600195][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 466.632726][ T8724] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 466.640481][ T8724] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 466.650340][ T8724] F2FS-fs (loop4): invalid crc value [ 466.682164][ T8739] loop2: detected capacity change from 0 to 40427 [ 466.695263][ T8724] F2FS-fs (loop4): Found nat_bits in checkpoint [ 466.757554][ T8724] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 466.765423][ T8724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.774127][ T8739] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 466.781781][ T8739] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 466.791129][ T8739] F2FS-fs (loop2): invalid crc value [ 466.802677][ T8739] F2FS-fs (loop2): Found nat_bits in checkpoint [ 466.883619][ T8764] loop0: detected capacity change from 0 to 16 [ 468.101583][ T8764] erofs: (device loop0): mounted with root inode @ nid 36. [ 468.204972][ T8769] bpf_get_probe_write_proto: 2 callbacks suppressed [ 468.204993][ T8769] syz.3.2817[8769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.206853][ T8739] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 468.211995][ T8769] syz.3.2817[8769] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.222910][ T8739] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 468.280485][ T8739] overlayfs: unrecognized mount option "/" or missing value [ 468.294324][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.294354][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.302586][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.309988][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.325627][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.333809][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.341225][ T293] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 468.557797][ T313] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 468.590928][ T313] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 468.922819][ T8788] 9p: Unknown uid 18446744073709551615 [ 469.256497][ T8785] syz.0.2825[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.258541][ T8785] syz.0.2825[8785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.304296][ T8785] loop0: detected capacity change from 0 to 16 [ 469.369477][ T8785] erofs: (device loop0): mounted with root inode @ nid 36. [ 469.510573][ T8800] syz.3.2829[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.510654][ T8800] syz.3.2829[8800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.179079][ T8822] 9pnet: Insufficient options for proto=fd [ 471.236339][ T8836] syz.2.2841[8836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.236423][ T8836] syz.2.2841[8836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.277607][ T8837] syz.1.2839[8837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.289370][ T8837] syz.1.2839[8837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.302013][ T8837] loop1: detected capacity change from 0 to 16 [ 471.350593][ T8837] erofs: (device loop1): mounted with root inode @ nid 36. [ 471.390933][ T8842] fuse: Bad value for 'fd' [ 473.510548][ T8864] loop2: detected capacity change from 0 to 256 [ 473.657534][ T8864] exfat: Deprecated parameter 'namecase' [ 473.715707][ T8864] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 473.917867][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.934125][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.952411][ T8862] device bridge_slave_0 entered promiscuous mode [ 473.982232][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.997989][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.014808][ T8862] device bridge_slave_1 entered promiscuous mode [ 474.217478][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.233568][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 474.248897][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 474.279410][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 474.299151][ T7230] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.306068][ T7230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.313901][ T8878] fuse: Bad value for 'fd' [ 474.341268][ T8880] syz.1.2856[8880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.341356][ T8880] syz.1.2856[8880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.355537][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 474.394259][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 474.409378][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 474.425770][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.432657][ T7230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.456416][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 474.465970][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.475536][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 474.487802][ T8882] device batadv_slave_0 entered promiscuous mode [ 474.500567][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.527588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.552539][ T8862] device veth0_vlan entered promiscuous mode [ 474.561070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.592096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.664258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.683446][ T313] device veth1_macvtap left promiscuous mode [ 474.689304][ T313] device veth0_vlan left promiscuous mode [ 474.926318][ T8898] fuse: Unknown parameter 'user_i00000000000000000000' [ 474.938943][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 474.938960][ T30] audit: type=1326 audit(1743712889.335:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 474.977984][ T30] audit: type=1326 audit(1743712889.335:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.013577][ T30] audit: type=1326 audit(1743712889.335:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.039575][ T30] audit: type=1326 audit(1743712889.363:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.058121][ T8904] syz.4.2866[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.062968][ T8904] syz.4.2866[8904] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.074780][ T30] audit: type=1326 audit(1743712889.363:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.074816][ T30] audit: type=1326 audit(1743712889.363:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.074843][ T30] audit: type=1326 audit(1743712889.391:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.156777][ T30] audit: type=1326 audit(1743712889.391:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.180879][ T30] audit: type=1326 audit(1743712889.391:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.183886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.212635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.222530][ T30] audit: type=1326 audit(1743712889.391:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8899 comm="syz.4.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a542ba169 code=0x7ffc0000 [ 475.249328][ T8862] device veth1_macvtap entered promiscuous mode [ 475.265041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.275094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.283657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.314501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.354097][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.477839][ T8927] fuse: Unknown parameter 'user_i00000000000000000000' [ 475.594083][ T8937] loop4: detected capacity change from 0 to 512 [ 475.623643][ T8937] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext3 [ 476.485132][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.492176][ T8959] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.499984][ T8959] device bridge_slave_0 entered promiscuous mode [ 476.507608][ T8959] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.516200][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.379664][ T8959] device bridge_slave_1 entered promiscuous mode [ 477.658818][ T8982] syz.1.2891[8982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.658931][ T8982] syz.1.2891[8982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.671505][ T8982] loop1: detected capacity change from 0 to 16 [ 477.723135][ T8982] erofs: (device loop1): mounted with root inode @ nid 36. [ 477.825036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.839020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.865103][ T8986] 9p: Unknown uid 18446744073709551615 [ 477.897909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.932128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.984988][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.991895][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.002992][ T8992] fuse: Unknown parameter 'group_id00000000000000000000' [ 478.060396][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.075902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.084153][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.091011][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.098342][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 478.261507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.291843][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.589344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 478.600385][ T8959] device veth0_vlan entered promiscuous mode [ 478.607304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.615455][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.654814][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.664630][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.747344][ T8959] device veth1_macvtap entered promiscuous mode [ 478.767643][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 478.780074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 478.799474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.822565][ T313] device veth1_macvtap left promiscuous mode [ 478.834264][ T313] device veth0_vlan left promiscuous mode [ 479.034945][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 479.060983][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.099532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.111194][ T9021] 9p: Unknown uid 18446744073709551615 [ 479.119101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.137341][ T9023] fuse: Bad value for 'user_id' [ 479.276941][ T9029] fuse: Unknown parameter 'user_i00000000000000000000' [ 479.445278][ T9046] binder: 9045:9046 ioctl 541b 200000000240 returned -22 [ 479.889896][ T9059] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 479.899400][ T9059] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 479.961363][ T9063] fuse: Bad value for 'user_id' [ 479.971023][ T9065] fuse: Unknown parameter 'user_id00000000000000000000' [ 480.034136][ T9067] loop4: detected capacity change from 0 to 16 [ 480.186611][ T9067] erofs: (device loop4): mounted with root inode @ nid 36. [ 480.599759][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 481.973059][ T9099] fuse: Unknown parameter 'user_id00000000000000000000' [ 482.064316][ T9109] 9pnet: Insufficient options for proto=fd [ 482.085498][ T9112] incfs: Can't find or create .index dir in ./file0 [ 482.092179][ T9112] incfs: mount failed -5 [ 482.188857][ T9121] loop3: detected capacity change from 0 to 512 [ 482.253710][ T9121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 482.361686][ T9121] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 482.475466][ T9121] System zones: 1-12 [ 482.522336][ T9121] EXT4-fs (loop3): 1 truncate cleaned up [ 482.541620][ T9121] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,nolazytime,nombcache,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 482.691866][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 482.691962][ T30] audit: type=1400 audit(1743712896.585:1779): avc: denied { write } for pid=9118 comm="syz.3.2943" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 482.881190][ T30] audit: type=1400 audit(1743712896.622:1780): avc: denied { add_name } for pid=9118 comm="syz.3.2943" name="#9b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 482.903271][ T30] audit: type=1400 audit(1743712896.622:1781): avc: denied { remove_name } for pid=9118 comm="syz.3.2943" name="#9b" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 482.986877][ T9134] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 482.988835][ T30] audit: type=1400 audit(1743712896.631:1782): avc: denied { rename } for pid=9118 comm="syz.3.2943" name="#9b" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 482.995636][ T9134] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 483.049021][ T30] audit: type=1400 audit(1743712896.631:1783): avc: denied { unlink } for pid=9118 comm="syz.3.2943" name="#9b" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 483.072660][ T30] audit: type=1400 audit(1743712896.631:1784): avc: denied { unlink } for pid=9118 comm="syz.3.2943" name="#9c" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 483.099398][ T30] audit: type=1400 audit(1743712896.856:1785): avc: denied { create } for pid=9118 comm="syz.3.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 483.343931][ T9141] loop1: detected capacity change from 0 to 16 [ 486.489088][ T9141] erofs: (device loop1): mounted with root inode @ nid 36. [ 486.724165][ T9145] fuse: Unknown parameter 'user_id00000000000000000000' [ 488.365208][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /578/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 488.390296][ T9191] fuse: Bad value for 'fd' [ 488.396210][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 488.425338][ T30] audit: type=1400 audit(1743712901.916:1786): avc: denied { rmdir } for pid=291 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 488.458939][ T9194] loop1: detected capacity change from 0 to 16 [ 488.496914][ T9194] erofs: (device loop1): mounted with root inode @ nid 36. [ 488.528694][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /578/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 489.051376][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 489.381835][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /578/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 489.427608][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 489.455082][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /578/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 489.477389][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 489.498568][ T291] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /578/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 489.521101][ T291] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 489.601895][ T9199] loop0: detected capacity change from 0 to 40427 [ 489.681647][ T9199] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 489.689654][ T9199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 489.704296][ T9199] F2FS-fs (loop0): invalid crc value [ 489.711766][ T9199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 489.744530][ T9199] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 489.751520][ T9199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 490.595858][ T9231] fuse: Bad value for 'fd' [ 490.637249][ T9221] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.748689][ T9235] 9pnet: Insufficient options for proto=fd [ 490.774789][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.793851][ T9221] device bridge_slave_0 entered promiscuous mode [ 490.830289][ T9221] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.932581][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.940107][ T9221] device bridge_slave_1 entered promiscuous mode [ 490.980239][ T7230] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 490.996336][ T7230] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 491.092356][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.099662][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.109414][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.117842][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.127393][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.134255][ T9143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.151397][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.187043][ T9246] loop1: detected capacity change from 0 to 16 [ 491.240493][ T9246] erofs: (device loop1): mounted with root inode @ nid 36. [ 491.278481][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.361622][ T7230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.369646][ T4007] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 491.382288][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.389158][ T7230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.484254][ T671] device veth1_macvtap left promiscuous mode [ 491.496725][ T671] device veth0_vlan left promiscuous mode [ 492.179021][ T9253] syz.0.2986[9253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.179132][ T9253] syz.0.2986[9253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.191840][ T9253] loop0: detected capacity change from 0 to 16 [ 492.264527][ T9253] erofs: (device loop0): mounted with root inode @ nid 36. [ 492.332119][ T4007] usb 3-1: Using ep0 maxpacket: 32 [ 492.460445][ T4007] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.471927][ T4007] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.538633][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.546773][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.556209][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.564613][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.581064][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 492.589538][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 492.601877][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 492.609787][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 492.621948][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 492.623230][ T4007] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 492.629649][ T9143] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 492.646906][ T9221] device veth0_vlan entered promiscuous mode [ 492.655108][ T4007] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 492.664136][ T4007] usb 3-1: Product: syz [ 492.668272][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.674484][ T9259] fuse: Bad value for 'fd' [ 492.677682][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.693348][ T9221] device veth1_macvtap entered promiscuous mode [ 492.704734][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.713516][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.722203][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.748862][ T4007] usb 3-1: Manufacturer: syz [ 492.751337][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.772288][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.792925][ T4007] hub 3-1:4.0: USB hub found [ 492.838803][ T9266] device batadv_slave_0 entered promiscuous mode [ 492.852363][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 492.868423][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 493.199792][ T4007] hub 3-1:4.0: 2 ports detected [ 495.627970][ T9295] fuse: Bad value for 'fd' [ 495.782629][ T9302] loop4: detected capacity change from 0 to 512 [ 495.843618][ T9303] syz.5.3000[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.843730][ T9303] syz.5.3000[9303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.856319][ T9303] loop5: detected capacity change from 0 to 16 [ 496.128057][ T9303] erofs: (device loop5): mounted with root inode @ nid 36. [ 496.151032][ T9302] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext3 [ 496.239424][ T9312] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 496.239463][ T9312] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 496.383067][ T4007] hub 3-1:4.0: set hub depth failed [ 496.428559][ T4007] usb 3-1: USB disconnect, device number 15 [ 497.783086][ T9331] device batadv_slave_0 entered promiscuous mode [ 497.807554][ T9338] 9pnet: Insufficient options for proto=fd [ 498.477789][ T9346] syz.5.3015[9346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.477900][ T9346] syz.5.3015[9346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.490763][ T9346] loop5: detected capacity change from 0 to 16 [ 498.516619][ T9335] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 498.541458][ T9335] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 498.548742][ T9346] erofs: (device loop5): mounted with root inode @ nid 36. [ 498.588880][ T9356] 9pnet: Insufficient options for proto=fd [ 498.766009][ T9363] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.772974][ T9363] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.781056][ T9363] device bridge_slave_0 entered promiscuous mode [ 499.997352][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 500.213504][ T9363] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.227033][ T9363] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.235215][ T9363] device bridge_slave_1 entered promiscuous mode [ 500.404265][ T9395] loop4: detected capacity change from 0 to 512 [ 500.504459][ T9395] EXT4-fs (loop4): Ignoring removed nobh option [ 500.714259][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.3036: corrupted inode contents [ 500.726370][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 500.732775][ T9395] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #3: comm syz.4.3036: mark_inode_dirty error [ 500.744307][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 500.751124][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.3036: corrupted inode contents [ 500.779560][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 500.786055][ T9395] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.3036: mark_inode_dirty error [ 500.798118][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 500.813271][ T9395] Quota error (device loop4): write_blk: dquota write failed [ 500.825269][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.191415][ T9395] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 502.203649][ T9395] EXT4-fs error (device loop4): ext4_acquire_dquot:6188: comm syz.4.3036: Failed to acquire dquot type 0 [ 502.215167][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.230410][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.3036: corrupted inode contents [ 502.237485][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.250042][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.256658][ T9395] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #16: comm syz.4.3036: mark_inode_dirty error [ 502.268172][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.274700][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.3036: corrupted inode contents [ 502.286675][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.293005][ T9395] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #16: comm syz.4.3036: mark_inode_dirty error [ 502.304474][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.310858][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.3036: corrupted inode contents [ 502.324281][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.330735][ T9395] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 502.347143][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.353846][ T9395] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #16: comm syz.4.3036: corrupted inode contents [ 502.354377][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.366028][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.377283][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.380845][ T9395] EXT4-fs error (device loop4): ext4_truncate:4303: inode #16: comm syz.4.3036: mark_inode_dirty error [ 502.389199][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.399477][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.405662][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.412184][ T9395] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 502.420260][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.429276][ T9395] EXT4-fs (loop4): Remounting filesystem read-only [ 502.436793][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.442939][ T9395] EXT4-fs (loop4): 1 truncate cleaned up [ 502.450710][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.462444][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.463188][ T9395] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh,. Quota mode: writeback. [ 502.484848][ T9395] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.503510][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.527425][ T30] audit: type=1400 audit(1743712915.134:1787): avc: denied { write } for pid=9394 comm="syz.4.3036" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 502.553290][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.561701][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.570695][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.570926][ T30] audit: type=1400 audit(1743712915.134:1788): avc: denied { setattr } for pid=9394 comm="syz.4.3036" path="/571/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 502.595347][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.654333][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 502.664950][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 502.695434][ T9363] device veth0_vlan entered promiscuous mode [ 502.708328][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 502.719599][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.212666][ T9427] syz.5.3046[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.214522][ T9427] syz.5.3046[9427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.262023][ T9427] loop5: detected capacity change from 0 to 16 [ 503.364559][ T9363] device veth1_macvtap entered promiscuous mode [ 503.377164][ T9427] erofs: (device loop5): mounted with root inode @ nid 36. [ 503.441415][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.463190][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.519373][ T9440] 9pnet: Could not find request transport: fd0x0000000000000003 [ 503.535638][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.553965][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.569860][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.600315][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.779261][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 504.806944][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 504.817128][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 504.891144][ T9463] loop2: detected capacity change from 0 to 256 [ 504.972622][ T9463] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 505.055602][ T9474] 9pnet: Insufficient options for proto=fd [ 505.061941][ T9468] syz.5.3059[9468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.062056][ T9468] syz.5.3059[9468] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.076949][ T9476] fuse: Bad value for 'rootmode' [ 505.137819][ T9469] loop5: detected capacity change from 0 to 16 [ 505.193777][ T9469] erofs: (device loop5): mounted with root inode @ nid 36. [ 505.194773][ T9485] loop0: detected capacity change from 0 to 512 [ 505.316293][ T9485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 505.495700][ T9485] EXT4-fs (loop0): 1 truncate cleaned up [ 505.501287][ T9485] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,init_itable=0x0000000000000003,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 505.604546][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 506.486169][ T9508] 9pnet: Insufficient options for proto=fd [ 506.510208][ T9511] fuse: Bad value for 'rootmode' [ 506.515011][ T30] audit: type=1400 audit(1743712918.866:1789): avc: denied { view } for pid=9510 comm="syz.1.3076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 506.728762][ T9524] syz.1.3078[9524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.728875][ T9524] syz.1.3078[9524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.741320][ T9524] loop1: detected capacity change from 0 to 16 [ 507.251790][ T9526] syz.0.3072[9526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.251899][ T9526] syz.0.3072[9526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.264311][ T9526] loop0: detected capacity change from 0 to 16 [ 507.312547][ T9524] erofs: (device loop1): mounted with root inode @ nid 36. [ 507.513947][ T9526] erofs: (device loop0): mounted with root inode @ nid 36. [ 507.845942][ T9533] 9pnet: Insufficient options for proto=fd [ 508.134274][ T671] device veth1_macvtap left promiscuous mode [ 508.145831][ T671] device veth0_vlan left promiscuous mode [ 508.302634][ T9545] 9pnet: Insufficient options for proto=fd [ 508.347077][ T9549] loop5: detected capacity change from 0 to 512 [ 508.427414][ T9558] fuse: Bad value for 'rootmode' [ 508.454707][ T9549] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 508.496264][ T9549] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 508.595484][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 508.764901][ T9549] EXT4-fs (loop5): 1 truncate cleaned up [ 508.770956][ T9549] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,init_itable=0x00000000000000ba,nombcache,discard,data_err=abort,,errors=continue. Quota mode: none. [ 508.791531][ T9549] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 508.801082][ T30] audit: type=1400 audit(1743712921.008:1790): avc: denied { relabelto } for pid=9548 comm="syz.5.3088" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 508.877964][ T9566] 9p: Unknown Cache mode fsca [ 508.941350][ T9569] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3097'. [ 508.973908][ T9575] 9pnet: Insufficient options for proto=fd [ 509.047778][ T9577] syz.2.3094[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.047893][ T9577] syz.2.3094[9577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.060589][ T9577] loop2: detected capacity change from 0 to 16 [ 509.106551][ T9577] erofs: (device loop2): mounted with root inode @ nid 36. [ 509.174884][ T30] audit: type=1400 audit(1743712921.354:1791): avc: denied { lock } for pid=9578 comm="syz.5.3100" path="socket:[52572]" dev="sockfs" ino=52572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 509.502007][ T9595] fuse: Unknown parameter 'use00000000000000000000' [ 509.708315][ T9598] loop0: detected capacity change from 0 to 512 [ 509.789051][ T9598] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 509.789051][ T9598] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 509.789051][ T9598] [ 509.844135][ T9598] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 509.844135][ T9598] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 509.844135][ T9598] [ 509.871127][ T9600] 9p: Unknown Cache mode fscach [ 509.878471][ T9598] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 509.920303][ T9598] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032018, mo2=0000] [ 509.931134][ T9598] EXT4-fs (loop0): 1 truncate cleaned up [ 509.936694][ T9598] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nobarrier,nouser_xattr,barrier=0x0000000000000010,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 509.961281][ T7230] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 509.990337][ T7230] EXT4-fs error (device loop0): ext4_release_dquot:6211: comm kworker/u4:6: Failed to release dquot type 1 [ 510.019545][ T9609] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3109'. [ 510.047437][ T9612] 9pnet: Insufficient options for proto=fd [ 510.115405][ T9622] fuse: Unknown parameter 'use00000000000000000000' [ 510.533505][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3114'. [ 511.001001][ T9634] syz.2.3117[9634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.001115][ T9634] syz.2.3117[9634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.013629][ T9634] loop2: detected capacity change from 0 to 16 [ 511.038868][ T9636] loop1: detected capacity change from 0 to 512 [ 511.072904][ T9634] erofs: (device loop2): mounted with root inode @ nid 36. [ 511.098556][ T9636] EXT4-fs (loop1): Mount option "dax=inode" incompatible with ext3 [ 511.110735][ T9639] xt_hashlimit: size too large, truncated to 1048576 [ 512.087565][ T9653] 9pnet: Insufficient options for proto=fd [ 512.215406][ T9658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3124'. [ 512.237448][ T9660] incfs: Can't find or create .index dir in ./file0 [ 512.244125][ T9660] incfs: mount failed -5 [ 512.269657][ T9662] loop5: detected capacity change from 0 to 512 [ 512.294919][ T9666] loop1: detected capacity change from 0 to 256 [ 512.427043][ T9666] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.443475][ T9674] fuse: Unknown parameter 'use00000000000000000000' [ 512.536540][ T9662] EXT4-fs (loop5): 1 orphan inode deleted [ 512.555704][ T9662] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 512.855297][ T9662] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.869356][ T9682] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 512.879149][ T9682] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 513.833604][ T9692] syz.0.3135[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.833718][ T9692] syz.0.3135[9692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.846232][ T9692] loop0: detected capacity change from 0 to 16 [ 513.921444][ T9697] syz.4.3136[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.921974][ T9697] syz.4.3136[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.942381][ T9697] loop4: detected capacity change from 0 to 16 [ 514.024026][ T9692] erofs: (device loop0): mounted with root inode @ nid 36. [ 514.058453][ T9697] erofs: (device loop4): mounted with root inode @ nid 36. [ 514.882362][ T9702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3139'. [ 514.984859][ T9706] syz.2.3140[9706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.984962][ T9706] syz.2.3140[9706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.114299][ T9714] incfs: Can't find or create .index dir in ./file0 [ 515.138856][ T9714] incfs: mount failed -5 [ 516.011216][ T9729] loop0: detected capacity change from 0 to 128 [ 516.084088][ T9733] incfs: Can't find or create .index dir in ./file0 [ 516.112104][ T9733] incfs: mount failed -5 [ 516.189806][ T9729] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 516.208466][ T9729] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 516.219202][ T9739] syz.2.3148[9739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.219303][ T9739] syz.2.3148[9739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.231810][ T9739] loop2: detected capacity change from 0 to 16 [ 516.288623][ T9739] erofs: (device loop2): mounted with root inode @ nid 36. [ 516.416201][ T9744] syz.4.3152[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.416868][ T9744] syz.4.3152[9744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.438968][ T9744] loop4: detected capacity change from 0 to 16 [ 516.523820][ T9745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3151'. [ 516.537235][ T9744] erofs: (device loop4): mounted with root inode @ nid 36. [ 516.765122][ T9746] device batadv_slave_0 entered promiscuous mode [ 517.415003][ T9751] loop1: detected capacity change from 0 to 256 [ 517.430759][ T9753] syz.2.3155[9753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.430850][ T9753] syz.2.3155[9753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.473518][ T9756] incfs: Can't find or create .index dir in ./file0 [ 517.531811][ T9751] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.606227][ T9756] incfs: mount failed -5 [ 517.743339][ T9764] 9pnet: Insufficient options for proto=fd [ 518.565439][ T9772] loop2: detected capacity change from 0 to 4096 [ 518.691716][ T9772] EXT4-fs (loop2): Test dummy encryption mode enabled [ 518.832008][ T9772] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 519.058652][ T30] audit: type=1400 audit(1743712930.549:1792): avc: denied { read } for pid=9774 comm="syz.4.3164" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 519.518600][ T30] audit: type=1400 audit(1743712930.549:1793): avc: denied { open } for pid=9774 comm="syz.4.3164" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 519.615982][ T9791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3165'. [ 519.683684][ T9795] incfs: Can't find or create .index dir in ./file0 [ 519.696095][ T9795] incfs: mount failed -5 [ 519.722443][ T9796] loop0: detected capacity change from 0 to 512 [ 519.775942][ T9800] loop4: detected capacity change from 0 to 512 [ 519.861502][ T9802] 9pnet: Insufficient options for proto=fd [ 519.903904][ T9800] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext3 [ 519.938711][ T9796] EXT4-fs (loop0): 1 orphan inode deleted [ 519.938850][ T9806] loop2: detected capacity change from 0 to 256 [ 520.030501][ T9796] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 520.088540][ T9796] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.122548][ T9806] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.005774][ T9825] loop1: detected capacity change from 0 to 512 [ 521.663648][ T9829] loop5: detected capacity change from 0 to 128 [ 521.698533][ T9825] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 521.923711][ T9829] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 521.934759][ T9829] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.974478][ T9829] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3177'. [ 522.078776][ T9825] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 522.259132][ T9825] System zones: 1-12 [ 522.285020][ T9825] EXT4-fs (loop1): 1 truncate cleaned up [ 522.308982][ T9825] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,nolazytime,nombcache,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 522.371134][ T9839] syz.4.3180[9839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.371225][ T9839] syz.4.3180[9839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.469373][ T9363] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 522.650865][ T9363] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 522.839211][ T9363] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 522.960906][ T9846] loop5: detected capacity change from 0 to 4096 [ 523.028135][ T9846] EXT4-fs (loop5): Test dummy encryption mode enabled [ 523.084911][ T9363] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 523.134421][ T9846] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 523.417948][ T9363] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 523.651362][ T9363] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 523.715092][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.735847][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.743565][ T9363] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 523.776185][ T9847] device bridge_slave_0 entered promiscuous mode [ 523.783258][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.798375][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.805482][ T9363] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 523.825395][ T9847] device bridge_slave_1 entered promiscuous mode [ 523.832667][ T9363] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /25/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 523.858821][ T9363] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 524.038665][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.045575][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.052700][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.054028][ T9856] loop2: detected capacity change from 0 to 512 [ 524.059550][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.074715][ T7230] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.082571][ T7230] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.137408][ T9856] EXT4-fs (loop2): Mount option "dax=inode" incompatible with ext3 [ 524.187385][ T9860] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 524.189384][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.207796][ T9860] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 524.211846][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.265245][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.330193][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.338373][ T671] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.345271][ T671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.352919][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.379506][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.387999][ T671] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.394907][ T671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.421901][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.110511][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.118432][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.126554][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.137817][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3191'. [ 525.158366][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.167520][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.191141][ T9875] loop2: detected capacity change from 0 to 256 [ 525.193516][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.206624][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.239332][ T9847] device veth0_vlan entered promiscuous mode [ 525.253430][ T9847] device veth1_macvtap entered promiscuous mode [ 525.271095][ T9875] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 525.302035][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.406440][ T9883] syz.0.3192[9883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.406974][ T9883] syz.0.3192[9883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.428975][ T9883] loop0: detected capacity change from 0 to 16 [ 525.486957][ T9883] erofs: (device loop0): mounted with root inode @ nid 36. [ 525.600086][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.728629][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.128465][ T9887] loop5: detected capacity change from 0 to 4096 [ 526.806539][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.835651][ T9887] EXT4-fs (loop5): Test dummy encryption mode enabled [ 526.892549][ T9887] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 526.987737][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.189746][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.221522][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.248303][ T9897] loop0: detected capacity change from 0 to 512 [ 527.272869][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.282475][ T9899] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 527.313331][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.321359][ T9899] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 527.377446][ T9897] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext3 [ 527.414650][ T9901] loop4: detected capacity change from 0 to 512 [ 527.483748][ T9901] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 527.579848][ T9901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 527.587664][ T9901] System zones: 1-12 [ 527.592664][ T9901] EXT4-fs (loop4): 1 truncate cleaned up [ 527.598123][ T9901] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,nolazytime,nombcache,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 527.617489][ T9901] overlayfs: failed to resolve './bus': -2 [ 527.678237][ T9864] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.685185][ T9864] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.692994][ T9864] device bridge_slave_0 entered promiscuous mode [ 527.701045][ T9864] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.715116][ T9864] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.726167][ T9864] device bridge_slave_1 entered promiscuous mode [ 527.741154][ T9909] loop4: detected capacity change from 0 to 512 [ 527.762144][ T9911] incfs: Can't find or create .index dir in ./file0 [ 527.780883][ T9909] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext3 [ 527.922051][ T9911] incfs: mount failed -5 [ 527.990589][ T9143] device veth1_macvtap left promiscuous mode [ 528.041959][ T9143] device veth0_vlan left promiscuous mode [ 529.031463][ T9933] loop5: detected capacity change from 0 to 256 [ 529.078766][ T9935] SELinux: security_context_str_to_sid(user_u) failed for (dev ?, type ?) errno=-22 [ 529.088162][ T9935] SELinux: security_context_str_to_sid(user_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 529.277478][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 529.411689][ T9946] loop4: detected capacity change from 0 to 128 [ 529.618384][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.291571][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.301297][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.310926][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.317840][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.947119][ T9948] device batadv_slave_0 left promiscuous mode [ 530.982555][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 531.005207][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 531.039616][ T9955] loop5: detected capacity change from 0 to 512 [ 531.047108][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.087852][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.094722][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.126376][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 531.135106][ T9955] EXT4-fs (loop5): Mount option "dax=inode" incompatible with ext3 [ 531.159864][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.185062][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 531.209660][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.235082][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.260063][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.289299][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.301359][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.320427][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.361333][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.371605][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.380096][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.385568][ T9946] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 531.398168][ T9946] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.450530][ T9941] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3212'. [ 531.458028][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.469988][ T9960] xt_hashlimit: size too large, truncated to 1048576 [ 531.532988][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.557804][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.576764][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 531.603028][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.295549][ T9864] device veth0_vlan entered promiscuous mode [ 532.319578][ T9864] device veth1_macvtap entered promiscuous mode [ 532.350636][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.359443][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.392273][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.436317][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.452650][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 532.473226][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.491960][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.500622][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.509468][ T671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.537830][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3222'. [ 532.678419][ T9971] device batadv_slave_0 entered promiscuous mode [ 533.628366][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3230'. [ 533.803436][T10004] loop4: detected capacity change from 0 to 128 [ 533.991730][T10006] loop0: detected capacity change from 0 to 512 [ 534.003897][T10004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.015135][T10004] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.045418][T10004] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3229'. [ 534.071376][ T9143] device bridge_slave_1 left promiscuous mode [ 534.114142][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.516281][T10016] xt_hashlimit: size too large, truncated to 1048576 [ 534.563300][ T30] audit: type=1400 audit(1743712945.104:1794): avc: denied { map } for pid=10008 comm="syz.6.3232" path="/dev/net/tun" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 534.590009][T10017] loop6: detected capacity change from 0 to 512 [ 534.743495][ T30] audit: type=1400 audit(1743712945.104:1795): avc: denied { execute } for pid=10008 comm="syz.6.3232" path="/dev/net/tun" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 534.771378][ T9143] device bridge_slave_0 left promiscuous mode [ 534.777609][T10006] EXT4-fs (loop0): Mount option "dax=inode" incompatible with ext3 [ 534.789885][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.813463][ T9143] device veth1_macvtap left promiscuous mode [ 534.826247][ T9143] device veth0_vlan left promiscuous mode [ 534.854849][T10017] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.6.3232: corrupted xattr block 95 [ 534.880936][T10017] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3232: bg 0: block 7: invalid block bitmap [ 534.923620][T10017] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 534.952076][T10017] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2932: inode #11: comm syz.6.3232: corrupted xattr block 95 [ 534.981876][T10017] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -117) [ 534.997632][T10017] EXT4-fs (loop6): 1 orphan inode deleted [ 535.013143][T10017] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.372989][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.380116][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.745684][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3239'. [ 535.779081][T10041] device batadv_slave_0 entered promiscuous mode [ 536.409255][T10071] xt_hashlimit: size too large, truncated to 1048576 [ 536.775027][T10073] loop6: detected capacity change from 0 to 128 [ 536.927216][T10073] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 536.938089][T10073] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.971900][T10073] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3246'. [ 537.648299][T10091] loop4: detected capacity change from 0 to 4096 [ 537.730328][T10091] EXT4-fs (loop4): Test dummy encryption mode enabled [ 537.799514][T10091] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 538.719424][T10102] incfs: Can't find or create .index dir in ./file0 [ 538.742181][T10102] incfs: mount failed -5 [ 538.887793][T10111] loop6: detected capacity change from 0 to 512 [ 538.896172][T10110] loop4: detected capacity change from 0 to 512 [ 538.965447][T10110] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 538.974525][T10110] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 538.985746][T10111] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext3 [ 539.023246][T10110] SELinux: duplicate or incompatible mount options [ 540.949470][T10129] syz.5.3268[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.949586][T10129] syz.5.3268[10129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.962215][T10129] loop5: detected capacity change from 0 to 16 [ 541.031162][T10129] erofs: (device loop5): mounted with root inode @ nid 36. [ 541.920924][T10142] loop2: detected capacity change from 0 to 4096 [ 542.036063][T10142] EXT4-fs (loop2): Test dummy encryption mode enabled [ 543.070335][T10142] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 543.921839][T10167] loop5: detected capacity change from 0 to 512 [ 544.013527][T10167] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 544.037745][T10167] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 544.045790][T10167] System zones: 1-12 [ 544.050568][T10167] EXT4-fs (loop5): 1 truncate cleaned up [ 544.056141][T10167] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,nolazytime,nombcache,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 544.595475][T10189] syz.5.3284[10189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.595997][T10189] syz.5.3284[10189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.614204][T10189] loop5: detected capacity change from 0 to 16 [ 544.997368][T10189] erofs: (device loop5): mounted with root inode @ nid 36. [ 546.181899][T10201] loop4: detected capacity change from 0 to 128 [ 550.303362][T10205] loop6: detected capacity change from 0 to 512 [ 550.348434][T10205] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext3 [ 550.356902][T10201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 550.368059][T10201] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.994119][T10200] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3287'. [ 551.441890][T10217] loop5: detected capacity change from 0 to 4096 [ 551.531923][T10217] EXT4-fs (loop5): Test dummy encryption mode enabled [ 551.712151][T10217] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 557.345691][T10260] syz.6.3303[10260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.346942][T10260] syz.6.3303[10260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.576553][T10258] loop6: detected capacity change from 0 to 16 [ 557.595648][T10261] loop4: detected capacity change from 0 to 16 [ 557.707621][T10261] erofs: (device loop4): mounted with root inode @ nid 36. [ 558.562708][T10258] erofs: (device loop6): mounted with root inode @ nid 36. [ 558.942342][T10274] loop0: detected capacity change from 0 to 256 [ 559.000108][T10274] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 559.019011][T10281] loop6: detected capacity change from 0 to 256 [ 560.527439][ T2496] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 560.830626][T10309] syz.6.3320[10309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.831108][T10309] syz.6.3320[10309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.849401][T10309] loop6: detected capacity change from 0 to 16 [ 560.867493][ T2496] usb 6-1: Using ep0 maxpacket: 8 [ 560.958149][T10309] erofs: (device loop6): mounted with root inode @ nid 36. [ 561.040782][ T2496] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 561.081221][ T2496] usb 6-1: config 179 has no interface number 0 [ 561.133855][ T2496] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 561.399612][ T2496] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 561.658502][ T2496] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.783646][ T2496] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 561.794351][ T2496] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 561.889472][T10319] loop2: detected capacity change from 0 to 16 [ 561.973678][T10319] erofs: (device loop2): mounted with root inode @ nid 36. [ 562.146940][ T2496] usb 6-1: config 179 interface 65 has no altsetting 0 [ 562.270903][T10321] loop6: detected capacity change from 0 to 512 [ 562.284745][ T2496] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 562.293939][ T2496] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.325136][T10321] EXT4-fs (loop6): Ignoring removed orlov option [ 562.329315][ T2496] usb 6-1: can't set config #179, error -71 [ 562.556950][ T2496] usb 6-1: USB disconnect, device number 2 [ 562.743768][T10331] loop0: detected capacity change from 0 to 128 [ 562.761999][T10321] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.3324: casefold flag without casefold feature [ 562.826055][T10321] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.3324: couldn't read orphan inode 15 (err -117) [ 563.003948][T10321] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 563.028410][T10331] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 563.039089][T10331] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.059089][T10331] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3325'. [ 563.143021][T10341] xt_hashlimit: size too large, truncated to 1048576 [ 564.206802][T10358] syz.5.3334[10358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.206998][T10358] syz.5.3334[10358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.220602][T10358] loop5: detected capacity change from 0 to 16 [ 564.294449][T10358] erofs: (device loop5): mounted with root inode @ nid 36. [ 564.927890][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3335'. [ 565.769977][T10371] loop5: detected capacity change from 0 to 16 [ 565.896544][T10371] erofs: (device loop5): mounted with root inode @ nid 36. [ 566.062604][T10373] loop2: detected capacity change from 0 to 512 [ 566.191414][ T30] audit: type=1400 audit(1743712974.681:1796): avc: denied { bind } for pid=10374 comm="syz.6.3338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 566.303772][T10373] EXT4-fs (loop2): Ignoring removed orlov option [ 566.537598][T10373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3339: bg 0: block 248: padding at end of block bitmap is not set [ 566.580433][T10373] Quota error (device loop2): write_blk: dquota write failed [ 566.609003][T10373] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 566.705350][T10373] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.3339: Failed to acquire dquot type 1 [ 566.728301][T10373] EXT4-fs (loop2): 1 truncate cleaned up [ 566.733784][T10373] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,norecovery,orlov,sysvgroups,dioread_lock,usrjquota=,,errors=continue. Quota mode: writeback. [ 566.872877][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3342'. [ 567.066916][T10373] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 567.105758][T10373] Quota error (device loop2): write_blk: dquota write failed [ 567.129602][T10373] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 567.154699][T10373] EXT4-fs error (device loop2): ext4_acquire_dquot:6188: comm syz.2.3339: Failed to acquire dquot type 1 [ 567.902181][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3347'. [ 568.206088][T10405] loop6: detected capacity change from 0 to 512 [ 568.292053][T10415] loop4: detected capacity change from 0 to 256 [ 568.311932][T10405] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.6.3348: corrupted xattr block 95 [ 568.354354][T10405] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.3348: bg 0: block 7: invalid block bitmap [ 568.440300][T10405] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 568.456113][T10405] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2932: inode #11: comm syz.6.3348: corrupted xattr block 95 [ 568.481263][T10405] EXT4-fs warning (device loop6): ext4_evict_inode:303: xattr delete (err -117) [ 568.502868][T10405] EXT4-fs (loop6): 1 orphan inode deleted [ 568.508634][T10405] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 568.556217][T10420] loop2: detected capacity change from 0 to 16 [ 568.623247][T10420] erofs: (device loop2): mounted with root inode @ nid 36. [ 569.606248][T10425] loop5: detected capacity change from 0 to 4096 [ 569.671518][T10425] EXT4-fs (loop5): Test dummy encryption mode enabled [ 569.812551][T10425] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,errors=continue,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 570.655633][T10438] loop2: detected capacity change from 0 to 128 [ 572.931840][T10438] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.942715][T10438] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.980682][T10438] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3357'. [ 573.578258][T10446] loop4: detected capacity change from 0 to 512 [ 573.674270][T10446] EXT4-fs (loop4): Mount option "dax=inode" incompatible with ext3 [ 573.899624][T10460] loop4: detected capacity change from 0 to 512 [ 573.978091][T10460] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 573.990352][T10460] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.429039][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3362'. [ 574.438217][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3359'. [ 575.162973][ T30] audit: type=1326 audit(1743712982.810:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f84d0169 code=0x7ffc0000 [ 575.279878][T10476] loop6: detected capacity change from 0 to 16 [ 575.325751][T10476] erofs: (device loop6): mounted with root inode @ nid 36. [ 575.753217][ T30] audit: type=1326 audit(1743712982.810:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f84d0169 code=0x7ffc0000 [ 576.171930][T10490] loop2: detected capacity change from 0 to 256 [ 576.182978][ T30] audit: type=1326 audit(1743712982.819:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f13f84d0169 code=0x7ffc0000 [ 576.210030][ T30] audit: type=1326 audit(1743712982.950:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f84d0169 code=0x7ffc0000 [ 576.211237][T10493] loop5: detected capacity change from 0 to 512 [ 576.233784][ T30] audit: type=1326 audit(1743712982.950:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.4.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13f84d0169 code=0x7ffc0000 [ 576.272040][T10493] EXT4-fs (loop5): Mount option "dax=inode" incompatible with ext3 [ 577.397100][T10512] loop6: detected capacity change from 0 to 512 [ 577.462667][T10512] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext3 [ 577.652717][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3377'. [ 577.980421][T10522] kvm: pic: non byte write [ 578.498846][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3384'. [ 578.757822][T10537] loop6: detected capacity change from 0 to 512 [ 578.966060][T10544] loop2: detected capacity change from 0 to 16 [ 579.035969][T10544] erofs: (device loop2): mounted with root inode @ nid 36. [ 579.279676][T10537] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext3 [ 580.410398][T10562] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 580.642493][T10572] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 580.730159][T10562] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 580.884907][T10575] loop0: detected capacity change from 0 to 256 [ 580.926380][T10575] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 581.258738][T10572] syz.6.3395 (10572) used greatest stack depth: 17560 bytes left [ 584.651512][T10613] loop2: detected capacity change from 0 to 16 [ 584.712415][T10613] erofs: (device loop2): mounted with root inode @ nid 36. [ 586.114966][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3418'. [ 693.016110][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 693.022904][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P101/1:b..l [ 693.030565][ C1] (detected by 1, t=10002 jiffies, g=51301, q=459) [ 693.036978][ C1] task:udevd state:R running task stack:22288 pid: 101 ppid: 1 flags:0x00004000 [ 693.047556][ C1] Call Trace: [ 693.050673][ C1] [ 693.053451][ C1] __schedule+0xccc/0x1590 [ 693.057724][ C1] ? release_firmware_map_entry+0x190/0x190 [ 693.063432][ C1] ? __kasan_check_write+0x14/0x20 [ 693.068380][ C1] ? _raw_read_lock_irqsave+0xb5/0x110 [ 693.073677][ C1] ? preempt_schedule+0xd9/0xe0 [ 693.078363][ C1] preempt_schedule_common+0x9b/0xf0 [ 693.083486][ C1] preempt_schedule+0xd9/0xe0 [ 693.087994][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 693.093461][ C1] ? irqentry_exit+0x30/0x40 [ 693.097893][ C1] ? sysvec_reschedule_ipi+0x8c/0x160 [ 693.103100][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 693.108565][ C1] preempt_schedule_thunk+0x16/0x18 [ 693.113598][ C1] ? ep_poll_callback+0x847/0x940 [ 693.118474][ C1] _raw_spin_unlock_irqrestore+0x71/0x80 [ 693.123926][ C1] __wake_up_sync_key+0x1b1/0x3d0 [ 693.128789][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 693.134605][ C1] ? __kasan_check_write+0x14/0x20 [ 693.139551][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 693.144846][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 693.149529][ C1] ? netlink_attachskb+0x6d6/0xa30 [ 693.154484][ C1] sock_def_readable+0x154/0x3b0 [ 693.159259][ C1] ? sock_no_sendpage_locked+0x1b0/0x1b0 [ 693.164732][ C1] netlink_sendskb+0x11d/0x1d0 [ 693.169322][ C1] netlink_unicast+0x426/0xac0 [ 693.173922][ C1] ? netlink_detachskb+0x90/0x90 [ 693.178696][ C1] ? security_netlink_send+0x7b/0xa0 [ 693.183816][ C1] netlink_sendmsg+0xa0a/0xd20 [ 693.188422][ C1] ? netlink_getsockopt+0x560/0x560 [ 693.193457][ C1] ? security_socket_sendmsg+0x82/0xb0 [ 693.198745][ C1] ? netlink_getsockopt+0x560/0x560 [ 693.203787][ C1] ____sys_sendmsg+0x59e/0x8f0 [ 693.208380][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 693.213243][ C1] ? import_iovec+0xe5/0x120 [ 693.217664][ C1] ___sys_sendmsg+0x252/0x2e0 [ 693.222180][ C1] ? __sys_sendmsg+0x260/0x260 [ 693.227126][ C1] ? __switch_to+0x62a/0x1190 [ 693.231646][ C1] ? native_set_ldt+0x360/0x360 [ 693.236330][ C1] ? __kasan_check_read+0x11/0x20 [ 693.241187][ C1] ? __fdget+0x179/0x240 [ 693.245266][ C1] __se_sys_sendmsg+0x19a/0x260 [ 693.249962][ C1] ? __x64_sys_sendmsg+0x90/0x90 [ 693.254800][ C1] ? __x64_sys_recvmsg+0x1f3/0x2b0 [ 693.259680][ C1] ? __kasan_check_write+0x14/0x20 [ 693.264622][ C1] ? switch_fpu_return+0x15f/0x2e0 [ 693.269588][ C1] __x64_sys_sendmsg+0x7b/0x90 [ 693.274168][ C1] x64_sys_call+0x16a/0x9a0 [ 693.278505][ C1] do_syscall_64+0x3b/0xb0 [ 693.282762][ C1] ? clear_bhb_loop+0x35/0x90 [ 693.287279][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 693.293016][ C1] RIP: 0033:0x7f79fb86da4b [ 693.297255][ C1] RSP: 002b:00007fff23bc70e8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.305498][ C1] RAX: ffffffffffffffda RBX: 0000556baa8f0d60 RCX: 00007f79fb86da4b [ 693.313317][ C1] RDX: 0000000000000000 RSI: 00007fff23bc70f8 RDI: 0000000000000005 [ 693.321130][ C1] RBP: 0000556baa915140 R08: 0000000000000001 R09: 0000000000000000 [ 693.328935][ C1] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 693.336745][ C1] R13: 00000000000000b5 R14: 0000000000000000 R15: 0000000000000000 [ 693.344588][ C1] [ 693.347425][ C1] rcu: rcu_preempt kthread starved for 9741 jiffies! g51301 f0x0 RCU_GP_DOING_FQS(6) ->state=0x0 ->cpu=1 [ 693.358444][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 693.368251][ C1] rcu: RCU grace-period kthread stack dump: [ 693.373984][ C1] task:rcu_preempt state:R running task stack:28224 pid: 14 ppid: 2 flags:0x00004000 [ 693.384576][ C1] Call Trace: [ 693.387703][ C1] [ 693.390480][ C1] __schedule+0xccc/0x1590 [ 693.394728][ C1] ? release_firmware_map_entry+0x190/0x190 [ 693.400465][ C1] ? preempt_schedule+0xd9/0xe0 [ 693.405138][ C1] preempt_schedule_common+0x9b/0xf0 [ 693.410262][ C1] preempt_schedule+0xd9/0xe0 [ 693.414774][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 693.420240][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 693.425712][ C1] preempt_schedule_thunk+0x16/0x18 [ 693.430745][ C1] try_to_wake_up+0x6ee/0x1160 [ 693.435357][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 693.440032][ C1] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 693.446116][ C1] ? __kasan_check_write+0x14/0x20 [ 693.451053][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 693.456351][ C1] ? console_conditional_schedule+0x30/0x30 [ 693.462076][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 693.466763][ C1] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 693.472410][ C1] wake_up_process+0x10/0x20 [ 693.476828][ C1] rcu_initiate_boost+0x242/0x290 [ 693.481702][ C1] rcu_gp_fqs_loop+0x8a2/0xf80 [ 693.486291][ C1] ? dyntick_save_progress_counter+0x1e0/0x1e0 [ 693.492280][ C1] ? __note_gp_changes+0x4ab/0x920 [ 693.497225][ C1] ? rcu_gp_init+0xc30/0xc30 [ 693.501652][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 693.506687][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 693.511126][ C1] rcu_gp_kthread+0xa4/0x350 [ 693.515543][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 693.520228][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 693.524742][ C1] ? __kasan_check_read+0x11/0x20 [ 693.529600][ C1] ? __kthread_parkme+0xb2/0x200 [ 693.534379][ C1] kthread+0x421/0x510 [ 693.538278][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 693.542796][ C1] ? kthread_blkcg+0xd0/0xd0 [ 693.547224][ C1] ret_from_fork+0x1f/0x30 [ 693.551478][ C1] [ 693.554340][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 693.560516][ C1] NMI backtrace for cpu 1 [ 693.564667][ C1] CPU: 1 PID: 10649 Comm: syz.6.3420 Not tainted 5.15.178-syzkaller-00034-g5e1b899f19c3 #0 [ 693.574475][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 693.584542][ C1] Call Trace: [ 693.587674][ C1] [ 693.590355][ C1] dump_stack_lvl+0x151/0x1c0 [ 693.594871][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 693.600344][ C1] dump_stack+0x15/0x20 [ 693.604330][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 693.609113][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 693.615096][ C1] ? panic+0x760/0x760 [ 693.618998][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 693.624903][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 693.630718][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 693.636624][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 693.642344][ C1] rcu_check_gp_kthread_starvation+0x1e3/0x250 [ 693.648337][ C1] ? wq_watchdog_touch+0x108/0x180 [ 693.653286][ C1] print_other_cpu_stall+0x112d/0x1340 [ 693.658575][ C1] ? try_to_wake_up+0x697/0x1160 [ 693.663352][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 693.668132][ C1] rcu_sched_clock_irq+0xaec/0x12f0 [ 693.673160][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 693.679146][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 693.684188][ C1] update_process_times+0x198/0x200 [ 693.689214][ C1] tick_sched_timer+0x188/0x240 [ 693.693903][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 693.699284][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 693.704323][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 693.709263][ C1] ? clockevents_program_event+0x22f/0x300 [ 693.714907][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 693.720807][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 693.725589][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3f0 [ 693.731312][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 693.736778][ C1] [ 693.739552][ C1] [ 693.742330][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 693.748186][ C1] RIP: 0010:_raw_spin_unlock_irq+0x49/0x70 [ 693.753794][ C1] Code: 08 00 74 0c 48 c7 c7 58 5a ad 86 e8 a1 b4 ca fc 48 83 3d 21 37 c5 01 00 74 2a 48 89 df e8 23 05 6d fc 66 90 fb bf 01 00 00 00 62 4e 64 fc 65 8b 05 33 4a 1a 7b 85 c0 74 03 5b 5d c3 e8 63 64 [ 693.773231][ C1] RSP: 0018:ffffc90000d37a48 EFLAGS: 00000246 [ 693.779133][ C1] RAX: 0000000000000001 RBX: ffff88810bed5780 RCX: dffffc0000000000 [ 693.786942][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 0000000000000001 [ 693.794756][ C1] RBP: ffffc90000d37a50 R08: dffffc0000000000 R09: ffffed1022655769 [ 693.802566][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022655871 [ 693.810378][ C1] R13: ffff8881132abb40 R14: 0000000100000000 R15: 1ffff11022655870 [ 693.818196][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 693.823227][ C1] __set_current_blocked+0x2a5/0x2f0 [ 693.828348][ C1] ? fpregs_set+0x6f0/0x6f0 [ 693.832684][ C1] ? set_current_blocked+0x40/0x40 [ 693.837633][ C1] ? irqentry_exit+0x30/0x40 [ 693.842059][ C1] ? asm_sysvec_irq_work+0x1b/0x20 [ 693.847008][ C1] signal_setup_done+0x397/0x5f0 [ 693.851779][ C1] ? ptrace_signal+0x460/0x460 [ 693.856378][ C1] ? get_sigframe+0x378/0x4b0 [ 693.860901][ C1] ? _raw_spin_unlock_irq+0x49/0x70 [ 693.865931][ C1] ? local_bh_enable+0x1f/0x30 [ 693.870527][ C1] ? fpu__clear_user_states+0x187/0x210 [ 693.875908][ C1] arch_do_signal_or_restart+0x132a/0x1680 [ 693.881643][ C1] ? get_sigframe_size+0x10/0x10 [ 693.886415][ C1] ? __ia32_sys_sigaltstack+0x70/0x70 [ 693.891627][ C1] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 693.896913][ C1] exit_to_user_mode_loop+0xa0/0xe0 [ 693.901945][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 693.907240][ C1] syscall_exit_to_user_mode+0x26/0x160 [ 693.912621][ C1] do_syscall_64+0x47/0xb0 [ 693.916873][ C1] ? clear_bhb_loop+0x35/0x90 [ 693.921388][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 693.927116][ C1] RIP: 0033:0x7fe61868c8a0 [ 693.931371][ C1] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d aa 11 08 00 e8 15 90 f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 693.950811][ C1] RSP: 002b:00007fe616c8b2f8 EFLAGS: 00000283 [ 693.956715][ C1] RAX: 0000000000000000 RBX: 00007fe616c8bef0 RCX: 0000000000000000 [ 693.964531][ C1] RDX: 00007fe616c8b300 RSI: 00007fe616c8b430 RDI: 0000000000000021 [ 693.972336][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 693.980157][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001040 [ 693.987957][ C1] R13: 00007fe616c8beb0 R14: 0000000000000000 R15: 0000000000000000 [ 693.995775][ C1] [ 762.762070][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 164s! [ 762.770807][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=-20 stuck for 163s! [ 762.779686][ C0] Showing busy workqueues and worker pools: [ 762.785401][ C0] workqueue events: flags=0x0 [ 762.789899][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 762.789946][ C0] pending: psi_avgs_work, destroy_list_workfn, key_garbage_collector, free_work, kfree_rcu_monitor [ 762.790043][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 762.790085][ C0] pending: vmstat_shepherd, free_work, bpf_map_free_deferred, kfree_rcu_monitor, rht_deferred_worker [ 762.790175][ C0] workqueue events_long: flags=0x0 [ 762.831906][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 762.831964][ C0] pending: br_multicast_gc_work [ 762.831995][ C0] workqueue events_unbound: flags=0x2 [ 762.849615][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 762.849669][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 762.849723][ C0] workqueue events_power_efficient: flags=0x80 [ 762.870105][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 762.870155][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work [ 762.870205][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 762.870246][ C0] pending: neigh_periodic_work, gc_worker, check_lifetime [ 762.870299][ C0] workqueue mm_percpu_wq: flags=0x8 [ 762.904833][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 762.904887][ C0] pending: vmstat_update [ 762.904923][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 762.904964][ C0] pending: vmstat_update [ 762.904996][ C0] workqueue writeback: flags=0x4a [ 762.933636][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 762.933687][ C0] pending: wb_workfn, wb_workfn [ 762.933736][ C0] workqueue kblockd: flags=0x18 [ 762.950460][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 762.950507][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 762.950547][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 762.950587][ C0] pending: blk_mq_timeout_work [ 762.950619][ C0] workqueue dm_bufio_cache: flags=0x8 [ 762.982796][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 762.982853][ C0] pending: work_fn [ 762.982886][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 762.999654][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 762.999724][ C0] pending: addrconf_verify_work [ 762.999835][ C0] workqueue wg-kex-wg0: flags=0x6 [ 763.016998][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 763.017044][ C0] pending: wg_packet_handshake_send_worker [ 763.017075][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 763.035135][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.035185][ C0] pending: wg_packet_encrypt_worker [ 763.035214][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.035255][ C0] pending: wg_packet_encrypt_worker [ 763.035282][ C0] workqueue wg-kex-wg1: flags=0x6 [ 763.065806][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 763.065852][ C0] pending: wg_packet_handshake_send_worker [ 763.065880][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 763.083959][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.084011][ C0] pending: wg_packet_encrypt_worker [ 763.084039][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.084081][ C0] pending: wg_packet_encrypt_worker [ 763.084111][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 763.114906][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.114959][ C0] pending: wg_packet_encrypt_worker [ 763.114987][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.115030][ C0] pending: wg_packet_encrypt_worker [ 763.115062][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 763.145848][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.145900][ C0] pending: wg_packet_encrypt_worker [ 763.145933][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.145975][ C0] pending: wg_packet_encrypt_worker [ 763.146002][ C0] workqueue wg-kex-wg1: flags=0x6 [ 763.176536][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 763.176583][ C0] pending: wg_packet_handshake_send_worker [ 763.176622][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 763.194667][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.194719][ C0] pending: wg_packet_encrypt_worker [ 763.194746][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 763.194786][ C0] in-flight: 6848:wg_packet_encrypt_worker [ 763.194817][ C0] pending: wg_packet_encrypt_worker [ 763.194842][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 763.231666][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.231726][ C0] pending: wg_packet_encrypt_worker [ 763.231757][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.231800][ C0] pending: wg_packet_encrypt_worker [ 763.231831][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 763.262617][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.262672][ C0] pending: wg_packet_encrypt_worker [ 763.262702][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.262744][ C0] pending: wg_packet_encrypt_worker [ 763.262773][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 763.293557][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.293613][ C0] pending: wg_packet_encrypt_worker [ 763.293644][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.293688][ C0] pending: wg_packet_encrypt_worker [ 763.293714][ C0] workqueue wg-kex-wg2: flags=0x6 [ 763.324273][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 763.324324][ C0] pending: wg_packet_handshake_send_worker [ 763.324355][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 763.342385][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.342436][ C0] pending: wg_packet_encrypt_worker [ 763.342462][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.342504][ C0] pending: wg_packet_encrypt_worker [ 763.342539][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 763.373332][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.373381][ C0] pending: wg_packet_encrypt_worker [ 763.373410][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.373450][ C0] pending: wg_packet_encrypt_worker [ 763.373477][ C0] workqueue wg-kex-wg1: flags=0x6 [ 763.404019][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 763.404063][ C0] pending: wg_packet_handshake_send_worker [ 763.404093][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 763.422139][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.422188][ C0] pending: wg_packet_encrypt_worker [ 763.422216][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.422256][ C0] pending: wg_packet_encrypt_worker [ 763.422284][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 763.453069][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.453120][ C0] pending: wg_packet_encrypt_worker [ 763.453150][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 763.453191][ C0] pending: wg_packet_encrypt_worker [ 763.453229][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=165s workers=11 idle: 4007 329 60 3330 655 8523 2238 20 6 1062