last executing test programs: 51.874956881s ago: executing program 3 (id=27): syncfs(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount$bind(&(0x7f0000000480)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', &(0x7f00000004c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x0, 0x221490, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 50.963472254s ago: executing program 3 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5, 0x800, 0x8ca, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "e009fac39f6d1d26fc3efe111f8b0e15c72d53b7da5e09600bc567bef64fa61a0b3e3e93202dc586e33f57bd0a047b0b21c3eb217bb0bb403cf6c436cb174011"}}, 0x80}, 0x1, 0x0, 0x0, 0x3f9bbfad8c226d7a}, 0x20000040) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5, 0xf52, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x81, 0x0, 0x0, 0x0, "595b6028a0e4931133f6d9919fd4a457896811cd874f3c107bbfc1c8831026f4079ba2b35d0600e02216198977dc3d41ed0880c64c39e5ff0f00000000000012"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22008041, &(0x7f0000000100)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) sendto$inet6(r2, &(0x7f0000000140)="44f9b108", 0x4, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001b00), 0x1040c0, 0x0) writev(r5, &(0x7f0000001b40)=[{&(0x7f0000001b80)='\f7', 0x2}], 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) read$rfkill(r0, 0x0, 0x0) ioctl$int_out(r4, 0x2, &(0x7f0000000000)) 46.946943244s ago: executing program 3 (id=47): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x13) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f0000000000)={0xeb, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x14, 0x0, 0x0) dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000d80)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000e00)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000e80), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000ec0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000f00)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xd, 0x4, &(0x7f0000001000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000001040)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001080)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0x1f2, 0x10, &(0x7f00000011c0), 0xfffffe51}, 0x48) setxattr$system_posix_acl(&(0x7f0000000100)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x20, 0x1}}, 0x24, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x8, &(0x7f0000000380)={[{@metacopy_off}, {@workdir={'workdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@default_permissions}]}) unlink(0x0) 46.070464924s ago: executing program 3 (id=51): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x3018000, &(0x7f0000000180)={[{@sysvgroups}]}, 0x4, 0x521, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000800)='./bus\x00', 0x68) mount$overlay(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x8, &(0x7f00000008c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000900)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x2000002, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f00000009c0)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)=ANY=[@ANYBLOB="300000001900010000000000000000000a80200000040000cfa1000008001e00010000000c0009000600130275eda474982884495b1f1aa1e202d13ab93c49e3d656f45ebaea9f26258a843ed8a8cb5c0dad22a6c7d70f7f10a2e2ac63ca5994178ee5d7303a2a4721db857155f64b9bc530c040e353b2680cfbdef1ad093d5c78458e526daaf5d5b97f746ece7866fdbdbe79f3ab78954a73fb98a6e8c7170235438b6cac6e915a9ffbe051b4c3f6eb36b54e9a879a87187dd1ad023c3aa8933b6933965502ff2883878fdd81214f0aa4af0f66e21826b84d6212d331d965b536b47abee9a7736d41654e21f2fe0ca8cfb373a9e06de53f0d2b22faf51d0d5107664bee19c78a699256d34d822ce943a9be8eaf7ca61ccd1454b2601d5fe76a2d581554b431bfd3c583beeac2a0768fa256cd083a166594837202935d496c1518325bb937494909f749ff978b8ed6260f28d7849d13bdd3447f076ed7a2b5c086bc01c5514945a62c2b91bf3062e8ba6785f67cf7bc4fb0e9ad2983095e53fe731df6d2153a39f4fe3251f87f27dcbe21238795dbfb8548d67c187bdcea674afd4225b66584172a0915e5701d8c3ce694de5631de02717e1d278c138303a0dccc571d095bf8186c76188899970142f9a4763c27be790c3dbfdd53736074279d74732abb8706c6478b0b7744c8f3a11cd0c3a7acff02541b08f76e851cac56d6e0f8797e54a55192b3cf87f025b110ff7121e9075a2b0cf8ff3631213448d59a275e341fab895368baf3bae97d7d7cfc33482ee829d9ae1abb", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40020}, 0x4000050) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000b00)={0x2e, 0x18, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000b80)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000bc0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000c00)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000c80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x107ffffe, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000f00)={0x2e, 0x5d, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x40) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r8, 0x1d, &(0x7f0000000100)={0x1}, 0x0) link(&(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940)='./file2\x00') 45.230842139s ago: executing program 3 (id=55): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000004c0)="$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") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7a, 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) sched_setscheduler(r1, 0x6, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x30, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000c40), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c6, &(0x7f00000014c0)="$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") sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0xf7b3d38ce2f68b1e) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f00000012c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0xb) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) sendto(r0, &(0x7f0000001300)="1db4d479c5faee911d50fbdf12a30d564a0e992d5f77ad426077a9f0ca1475183db32443011ff101251bcef8f165533aacd8c755793dc1ae99ad602c7cca2944de604d849a1e3b22905b0d26e9ff30b83f38a29b2530d22bdb0500000000000000e29408dd72f233eb4bc44f9c4e", 0x6e, 0x40010, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000a00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a40)={0x5, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0x4}) 44.040048301s ago: executing program 3 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000e0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000500), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r2, &(0x7f0000000740), &(0x7f0000000800)=""/24}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000280)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000700), 0x651, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2004c810}, 0x48810) recvmmsg(r5, &(0x7f0000000740), 0x10106, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000840)={0x2020}, 0xffffffe7) r10 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/file0\x00', 0x1, 0x0) write(r10, &(0x7f0000000480), 0x0) 43.905933535s ago: executing program 32 (id=62): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000e0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000500), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000700)={r2, &(0x7f0000000740), &(0x7f0000000800)=""/24}, 0x20) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000280)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000700), 0x651, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2004c810}, 0x48810) recvmmsg(r5, &(0x7f0000000740), 0x10106, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./debug\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r9, &(0x7f0000000840)={0x2020}, 0xffffffe7) r10 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./debug/file0\x00', 0x1, 0x0) write(r10, &(0x7f0000000480), 0x0) 43.730497243s ago: executing program 0 (id=66): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x10245c, &(0x7f0000000300), 0x25, 0x54e, &(0x7f0000000940)="$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") chdir(&(0x7f0000000140)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r4 = openat(r3, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000240)='./file0\x00', r4, &(0x7f00000007c0)='./file1\x00', 0x2) 43.394770817s ago: executing program 0 (id=67): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@delalloc}]}, 0x1, 0xbf8, &(0x7f0000000500)="$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") r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e20, 0x3, 0x4e22, 0x8000, 0x2}, {0xfffffffffffffffc, 0x1, 0x0, 0x5, 0x5, 0x1ff, 0x3, 0x8}, {0x200, 0x6, 0x0, 0x7ff}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x2, @in=@empty, 0x3505, 0x1, 0x1, 0x0, 0x0, 0x8007c, 0xfffffffe}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x20000401, &(0x7f00000004c0)={0xa, 0x4e28, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x5}, 0x1c) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001100)=0x2) r2 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000001140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000001240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = io_uring_setup(0xa0, &(0x7f0000001280)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4095, 0x440000}], 0x100000000000011a) pipe(0x0) socket$xdp(0x2c, 0x3, 0x0) timer_gettime(r1, &(0x7f0000000180)) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 42.548806443s ago: executing program 0 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000007c0)=@framed={{}, [@generic={0xdc, 0x0, 0xe, 0x0, 0x40}]}, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x12, 0x4) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000000c40)=""/4096, 0x1000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f0000000880)="$eJzs3UFoW2UcAPB/+pKm1c32IIiC8PQm6NimIHqxZXQwzGVKmHoQg9t0NFVYMbgdltWLeBR21JM3D3rwsJsXUZHdPHh1gkzFg+42cOzJy3tpXprWDUc6h7/fIfz7ff//976XfG1e0+Tra0uxerwRJ69evRJzc7WoLx1aimu1WIwkhs7HpNlt2gCAu8O1LIs/s0LEl7dSUpv+rACAaRo8/7+xt9Ly3jej+OuJ/Kx49m/sxtwAgOkof/+fr7YlW3LmJqrmpz0tAGCK8uf/qFcaHp1Iqfypvz5xbQAA3H1efPmV55dbES+k6VzE2vu9dq8dz476l0/GqejGidgfC3E9onijQH5TG9wePtJa2Z+maT9+WYx2XtFrR6z1e+3iSmE5GdQ340AsxGJZX77bIMuy5PAXrZUD6UBEnO/3Gvkoa7VeuzF4lWF5Pk79eE+ciIORxv0T9RFHWiub1yTt/LiD4zciNkavW+Tz3xcL8f3r8XZ043jktcPLmtbKuQNpeihr7amN6vu9dnOQV5h8BQQAAAAAAAAAAAAAAAAAAAAAAG7HvmLvnb1pmi5u7p+Tjfbv2VcmlP33RkR7sF9gu6gv9wfaKPYHyppZZNkf7z7R/iCJsf2BBhv8jO2vU4+ZO3vqAAAAAAAAAAAAAAAAAAAA8J+xfmY2Ot3uidPrZ86uVoP+6fUzMxGRt7z13Wdfzcd4znw5wHjVWFAvUypd6agqS4bJWTKWUwZJfvBavWj59OLmjCs5lbMYlc+McppbusaCvY/8/NHZ1eEIDyfDqhujnCS2Pa+zyfg0xoK1+4oBhy0Xdr5/JoODN8m5nGXZTuXnXp2silpEfcep/ssgy4Nvr7z54JPrw0WQFR57fOHY5Quf/Lba6eZHznW7s6fXr2ernfLr7RfbRNAcLpuksn5q5WKrVVdCvfPUjaN7dhh5Y7ylk/zw+0sPfXipbJmpPEzbTCM7dmnU8s42OUlx0M+3ds0WQT7Nza7n8iC/jybGGX6X3PRueTpu64F74OOlzsVzP/16q1WVHxI26gAAAAAAAAAAAAAAAAAAgF1R+ax4qfywb+Ofqp45Ov2ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuGf3//80gZja2tNxa8Fc/hi3HYtjVzAeM2coRF+/g2QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/1dwAAAP//kp5N2g==") r1 = open(&(0x7f00000023c0)='.\x00', 0x8000, 0x50) mount(0x0, 0x0, 0x0, 0x10005, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xbffffc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18) write(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r5 = syz_open_dev$usbfs(&(0x7f0000000400), 0xb, 0x101301) unshare(0x400) ioctl$USBDEVFS_BULK(r5, 0xc0185502, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000400), 0x0}, 0x20) getdents(r1, &(0x7f0000000140)=""/175, 0xf3) 40.896463102s ago: executing program 0 (id=72): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@usrjquota}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000900)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000940)='./bus\x00', &(0x7f0000000980), 0x8, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000a00)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000a40)='./file1\x00', &(0x7f0000000a80), 0x0, 0x0, 0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r1 = dup(r0) (async) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x20220000, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) (async) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={[&(0x7f0000000180)='nfs_export=on', &(0x7f0000000200)=']\x00', &(0x7f0000000240)='\x00']}, &(0x7f0000000380)={[&(0x7f00000002c0)='{!-!\x00', &(0x7f0000000300)='\x00']}) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$inet6(0xa, 0x3, 0x8000000003c) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syz_tun\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x20) 40.436458789s ago: executing program 0 (id=76): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xfffffff5, 0x42003ff, 0xfffffff5, 0xc4d3, 0x10, "df5d393e6922804a0000100001a6e7800600", 0x240000, 0x2}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006400)={0x3, 0xc, &(0x7f00000064c0)=ANY=[@ANYBLOB="180200000000000400000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000006540)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000006700)={r0, 0x0, 0x8b, 0x0, &(0x7f0000006580)="e33ea69cebd7559714d84b9a9f50297670525610d84effe2cd0fcf82370e3dbf4166d62312a622693202d7094a16e19ad7965e700539be085d81d629e017a9079b84173a6a3fa000000000000000059d12b2f5af7e73fb42a0e279ff11630dfbff7ad82e7ebca1a3130e29eaff873f0192517d317b34688f1dc028ee282894959e0de3e6e01ca2c2f2bb68659b5b84047db2", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f00000007c0)="$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") r1 = open(&(0x7f0000005d00)='.\x00', 0x8600, 0x30) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000005d40)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0xffffff00, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e23, 0x4e22, 0x4e22, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e24, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x5}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'macvlan1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x84, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x5, 0x2, 0x5, 0x5, 0x4], 0x0, 0x2}, {0xffffffffffffffff, [0x3, 0x8, 0x5, 0x6, 0x2], 0x4, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) fremovexattr(r1, &(0x7f0000006240)=@known='system.posix_acl_default\x00') r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000006100)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000006140)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000061c0)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000006300)=ANY=[@ANYBLOB="340000001006d4b7bdf45330728f00"/29, @ANYRES32=r4, @ANYBLOB="31200000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x4000) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000006280)='./file0\x00', 0x10) r7 = creat(&(0x7f00000062c0)='./file0\x00', 0x28) close(r7) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r8, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 38.37486894s ago: executing program 0 (id=87): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000600)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f00000002c0)="0500268dd6ff930800008000000000000000210d0000aaa9fa017242ba9380d4a40000000000000029", 0x29) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x801) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x80, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x80}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a3200000000380004"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000240)=0x1) 38.319568665s ago: executing program 33 (id=87): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xb, 0x103381) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000600)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x22, &(0x7f00000002c0)="0500268dd6ff930800008000000000000000210d0000aaa9fa017242ba9380d4a40000000000000029", 0x29) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000016c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x801) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x80, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x80}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a3200000000380004"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000240)=0x1) 19.561995902s ago: executing program 1 (id=239): r0 = fsopen(0x0, 0x0) finit_module(r0, &(0x7f0000000000)='cgroup2\x00', 0x1) 19.453862743s ago: executing program 1 (id=240): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r4, &(0x7f0000000540), 0x0}, 0x20) 19.452913273s ago: executing program 1 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100230100003402000003000000400001800d0001007564703a73797a30000000002c0004001400010002007530ac1414aa00000500000000001400020002"], 0x54}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r3, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x5, 0xe, 0x0, &(0x7f00000005c0)="cf6d7827930f5e94831c3c99a506", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000240)={'HL\x00'}, &(0x7f0000000280)=0x1e) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee01) bind$netlink(r6, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbff, 0x10}, 0xc) setrlimit(0x40000000000008, &(0x7f0000000480)={0x4, 0x9}) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001}, 0x8) sendto$inet6(r7, 0x0, 0x4000, 0x4400c881, &(0x7f0000000640)={0xa, 0x4e24, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x2}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0x545, 0x2, 0x80010, r6, 0x0) 19.246856534s ago: executing program 1 (id=246): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xff, 0x5534, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000005c00)='./file1\x00', 0x1c1341, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2000010, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write$FUSE_INIT(r1, &(0x7f0000000540)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000005cc0)='./file1\x00', 0x42, 0x140) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3203, 0x4) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, 0x3, 0x1}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x2, 0x90, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=[r3, r4], 0x8}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}, @exit_looper, @clear_freeze={0x400c6314, 0x2}, @release={0x40046306, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0xe1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @fd={0x66642a85, 0x0, r5, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}]}) write$FUSE_WRITE(r2, &(0x7f0000005d00)={0x18}, 0xfffffdef) 17.765046155s ago: executing program 1 (id=249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000300)="$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") r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x202, &(0x7f00000005c0)=0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x64842, 0x0) capset(&(0x7f0000000bc0)={0x20071026}, &(0x7f0000000c00)={0x200000, 0x200000}) mkdir(&(0x7f0000000c40)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x11) pipe2(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r7, &(0x7f0000000d40)={'#! ', './file0'}, 0xb) read$FUSE(r4, &(0x7f0000000d80)={0x2020}, 0x2020) tee(r6, r5, 0x9, 0x8) pwritev2(r3, &(0x7f0000000640)=[{&(0x7f0000000680)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) fcntl$setstatus(r1, 0x4, 0x6000) io_submit(r2, 0x3b, &(0x7f00000006c0)=[&(0x7f0000000700)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r1, &(0x7f0000000740), 0x70000}]) 17.308541142s ago: executing program 1 (id=250): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x8f}) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.159775077s ago: executing program 34 (id=250): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000002c0)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x24, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x8f}) pwrite64(0xffffffffffffffff, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x3, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.643265813s ago: executing program 4 (id=283): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x5) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000580), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) keyctl$restrict_keyring(0xa, 0x0, &(0x7f00000005c0)='asymmetric\x00', &(0x7f0000000600)='id\x00\x00\x00\x00\x00!N\x8d\xa5C\xf3\xc7\x1a\x86\xa3\x89j\xca\xe3\xbc\x83g\xb3v\xd9\xdfa\xedY\xebn>[5\xe9\x00\xf5\x10\x05$\xde\x05\xfa\xcf\x80B\x17\x85\xa5\x8a\x89\xf6~p3\xac@\xdb\xc8o\xc6\xa7\x14\x17O\xf8A/\xf0\x9cO\xcbfO\x18 L_\x00r\x89S\xd7tv\x18\x04\xb8a\x12\x10\xca4\xae\x0e\x05\xb3\xdd\xed%\xb4\xb4R\x8b\x83\xbe\xf5\xdb\x80j\xdf\xd3\xe7\n\xd7Y\nD\xcc\xb0T\xfb\x85\xd9\xd8u\x01We\xf5\xf9o\x00\xce|\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88@I\xc5\xfe\x01h4\xae\x90\'\x9c7\x9d\x10\xa5\xa3b5\xafL11`\xfe\b \x90\xf9\x93\xb4B\xb8\x18\xdb{\xdf\x19\x1e\xbc\xf6\xc1\xc8\xd0\xdc\xda\xf7\xba\x18\xc7') close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x10, &(0x7f00000008c0)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r3, 0x0) syz_mount_image$exfat(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="696f636861727365743d69736f3b3835392d37a73932bcf8244e952d24b095debdf275d82e2bf809e4997920a2a15bc3ddeb8553a16601d08c1249d5b551b44acb6ef0d5eeb9f6c601e5de"], 0x1, 0x14de, &(0x7f0000000a80)="$eJzs3AlwVUX2MPA+3X0hxAjPiOx9+lx4YoAmIiKyiIgsIiIiAiK7CIgYERERESEgm4iAiICsEZE1AiJLgIhh3xfZNyODiIiIbLIJ9FdxnGFmnCm/b775D/+qnF9VV/q8e0+/0zmVvHtf1Xs/dBtes0mtag2JSPw71F8m8OcfyUKIGCHEICFEHiFEIIQoF18uPut4LgXJ/9aTsP8hjWbe6ArYjcT9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2VpqwVt4ZN/B7/9nZ/z6n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3P/sjfvPWLb2v+A9aB43cDDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY/8FF/11Wgjxl/nfnAI3sDzGGGOMMcYYY4z9B/icN7oCxhhjjDHGGGOM/c8DIYUSWgQih8gpYkQuEStuEnHiZpFb5BERcYuIF7eKvOI2kU/kFwVEQVFIFBZFhBEorCARiqKimIiK20VxcYdIECVESVFKOFFaJIo7RRlxlygr7hblxD2ivLhXVBAVRSVRWdwnqoj7RVXxgKgmHhTVRQ1RU9QSD4na4mFRRzwi6opHRT3xmKgvHhcNxBOioWgkGosnRRPxlGgqmonmooVoKVqJ1v9W/uuip3hD9BK9RbLoI/qKN0U/0V8MEAPFIPGWGCzeFkPEO2KoGCaGi3fFCPGeGCneF6PEaDFGfCDGinFivJggJopJIkV8KCaLj8QU8bGYKqaJ6WKGmClmiVTxiZgt5oi54lMxT3wm5osFYqFYJNLEYrFELBXp4nOxTHwhMsRysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEl2K72CF2il1it9gj9op9Yr84IA6Kr0Sm+Pr/Mf/CP+R3BwECJEjQoCEH5IAYiIFYiIU4iIPckBsiEIF4iIe8kBfyQT4oAAWgEBSCIlAEEBAICIpCUYhCFIpDcUiABCgJJcGBg0RIhDJwF5SFslAOykF5KA8VoCJUhMpQGapAFagKVaEaVIPqUB1qQk14CB6Ch6EO1IG6UBfqQT2oD/WhATSAhtAQGkNjaAJNoCk0hebQHFpCS2gNraENtIG20BbaQ3voAB2gI3SEJEiCTtAJOkNn6AJdoCt0hW7QDbrDa/AavA6vwxvwBvSG6rIP9IW+0A/6wQAYCAPhLRgMb8Pb8A4MhWEwHN6Fd+E9GAnnYRSMhjEwBqrIcTAeJgDJSZACKTAZJsMUmAJTYRpMgxkwE2ZBKqTCbJgDc+BTmAefwWewABbAIkiDNFgCSyEd0mEZXIAMWA4rYCWsgtWwCtbCOlgLG2AjbIDNsBm2wlb4Er6EHbADdsEu2AN7YB/sgwNwAIZCJmTCITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uZf3xyyxaaplD5pAxMkbGylgZJ+NkbplbRmRExst4mVfmlflkPllAFpCFZCFZRBaRKFGSDGVRWVRGZVQWl8VlgkyQJWVJ6aSTiTJRlpFlZFlZVpaT98jy8l5ZQVaU7VxlWVlWke1dVfmArCaryeqyhqwpa8lasrasLevIOrKurCvryXqyvnxcNpB9YAA0klmdaSKHQVM5HJrLFrKlbCXfg6dlGzkS2sp2sr18Vo6GUdBRtnFJ8gXZSY6HzvIlOQFell3lJOgmX5Xd5Wuyh3xd9pRtXS/ZW06FPrKvnAH9ZH85QA6Us6GGzOpYTfmOHCqHyeHyXbkI3pMj5ftylBwtx8gP5Fg5To6XE+REOUmmyA/lZPmRnCI/llPlNDldzpAz5SyZKj+Rs+UcOVd+KufJz+R8uUAulItkmlwsl8ilMl1+LpfJL2SGXC5XyJVylVwt18i1cp1cLzfIjXKT3Cy3yK1ym/xSbpc75E65S+6We+ReuU/ulwfkQfmVzJRfy0PyT/Kw/EYekd/Ko/I7eUx+L4/LH+QJ+aM8KX+Sp+RpeUaelefkz/K8vCAvykvysvxFXpFX5TXppVCgpFJKq0DlUDlVjMqlYtVNKk7drHKrPCqiblHx6laVV92m8qn8qoAqqAqpwqqIMgqVVaRCVVQVU1F1uyqu7lAJqoQqqUopp0qrRHWnKqPuUmXV3aqcukeVV/eqCqqiqqQqq/tUFXW/qqoeUNXUg6q6qqFqqlrqIVVbPazqqEdUXfWoqqceU/XV46qBekI1VI1UY/WkaqKeUk1VM9VctVAtVSvVWj2t2qhnVFvVTrVXz6oO6jnVUT2vktQLqpN6UXVWL6ku6mXVVb2iuqlXVXf1muqhrqpryqteqrdKVn1UX/Wm6qf6qwFqoBqk3lKD1dtqiHpHDVXD1HD1rhqh3lMj1ftqlBqtxqgP1Fg1To1XE9RENUmlqA/VZPWRmqI+VlPVNDVdzVAz1Sw14LeV5v5f5H/0T/KH/PrsW9U29aXarnaonWqX2q32qL1qr9qv9quD6qDKVJnqkDqkDqvD6og6oo6qo+qYOqaOq+PqhDqhTqqT6pQ6rS6ps+qc+lmdVxfUBXVJXVaX1ZXffgdCg5Zaaa0DnUPn1DE6l47VN+k4fbPOrfPoiL5Fx+tbdV59m86n8+sCuqAupAvrItpo1FaTDnVRXUxH9e26uL5DJ+gSuqQupZ0urRP1nf/f+X9UX2vdWrfRbXRb3Va31+11B91Bd9QddZJO0p10J91Zd9ZddBfdVXfV3XQ33V131z10D91T99S9dC+drJN1X/2m7qf76wF6oB6k39KD9WA9RA/RQ/VQPVwP1yP0CD1Sj9Sj9Cg9Ro/RY/VYPV6P1xP1RJ2iU/RkPVlP0VP0VD01+O2iSqfqVD1bz9Zz9Vw9T8/T8/V8vVAv1Gk6TS/RS3S6TtfL9DKdoZfr5XqlXqlX69V6rV6r1+v1eqPeqDfrzTpDb9Pb9Ha9Xe/UO/VuvVvv1Xv1fr1fH9QHdabO1If0IX1YH9ZH9BF9VB/Vx/QxfVwf1yf0CX1Sn9Sn9Cl9Rp/R5/Q5fV6f1xf1RX1ZX9ZX9BV9TV/LuuwLZCADHeggR5AjiAligtggNogL4oLcQe4gEkSC+CA+yBvcFuQL8gcFgoJBoaBwUCQwAQY2oCAMigbFgmhwe1A8uCNICEoEJYNSgQtKB4nBnUGZ4K6gbHB3UC64Jygf3BtUCCoGlYLKwX1BleD+oGrwQFAteDCoHtQIaga1goeC2sHDQZ3gkaBu8GhQL3gsqB88HjQInggaBo2CxsGTQZPgqaBp0CxoHrQIWgatgtb/0fW9P5//GdfL9DbJpo/pa940/Ux/M8AMNIPMW2awedsMMe+YoWaYGW7eNSPMe2aked+MMqPNGPOBGWvGmfFmgploJpkU86GZbD4yU8zHZqqZZqabGWammWVSzSdmtplj5ppPzTzzmZlvFpiFZpFJM4vNErPUpJvPzTLzhckwy80Ks9KsMqvNGrPWrDPrzQaz0Wwym80Ws9VsM1+a7WaH2Wl2md1mj9lr9pn95oA5aL4ymeZrc8j8yRw235gj5ltz1HyX55j53hw3P5gT5kdz0vxkTpnT5ow5a86Zn815c8FcNJfMZfOLuWKummvGZ13cZ728o0aNOTAHxmAMxmIsxmEc5sbcGMEIxmM85sW8mA/zYQEsgIWwEBbBIpiFkLAoFsUoRrE4FscETMCSWBIdOkzERCyDZbAslsVyWA7LY3msgBWwElbC+/A+vB/vxwfwAXwQH8QaWANrYS2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBtjY2yCTbApNsXm2BxbYktsja2xDbbBttgW22N77IAdsCN2xCRMwk7YCTtjZ+yCXbArdsVu2A27Y3fsgT2wJ/bEXtgLkzEZ+2Jf7If9cAAOwEE4CAfjYByCQ3AoDsXhOBxH4AgciSNxFI7GMfgBjsVxOB4n4ESchCmYgpNxMk7BKTgVp+J0nI4zcSamYirOxtk4F+fiPJyH83E+LsSFmIZpuASXYDqm4zJchhmYgStwBa7CVbgG1+A6XIcbcANuwk24BbfgNtyG23E77sSduBt3417ci/txPx7Eg5iJmXgID+FhPIxH8AgexaN4DI/hcTyOJ/AEnsSTeApP4Rk8g+fwHJ7H83gRL+Jl/AWv4FW8hh5jbC4ba2+ycfZmm9vmsf8YF7AFbSFb2Baxxuaz+f8uRmttgi1hS9pS1tnSNtHe+bu4gq1oK9nK9j5bxd5vq/4urm0ftnXsI7aufdTWsg/9XVzPPmbr26dsA9vMNrQtbGPbyjaxT9mmtpltblvYlraV7WCfsx3t8zbJvmA72Rd/Fy+xS+06u95usBvtfnvAXrSX7HH7g71sf7G9bG87yL5lB9u37RD7jh1qh/0uHmM/sGPtODveTrAT7aTfxdPtDDvTzrKp9hM72875XZxmF9t5Nt3OtwvsQrvo1zirpnT7uV1mv7AZdrldYVfaVXa1XWPX/rXWlXaz3WK32r12n91ud9iddpfdbff8Gmft46D9ymbar+0x+709bL+xR+wJe9R+92uctb8T9kd70v5kT9nT9ow9a8/Zn+15e+HX/Wft/ay9aq9ZbwUBSVKkKaAclJNiKBfF0k0URzdTbspDEbqF4ulWyku3UT7KTwWoIBWiwlSEDCFZIgqpKBWjKN1OxekOSqASVJJKkaPSlEh3Uhm6i8rS3VSO7qHydC9VoIpUiSrTfVSF7qeq9ABVowepOtWgmlSLHqLa9DDVoUeoLj1K9egxqk+PUwN6ghpSI2pMT1ITeoqaUjNqTi2oJbWi1vQ0taFnqC21o/b0LHWg56gjPU9J9AJ1ohepM71EXehl6kqvUDd6lbrTa9SDXqee9Ab1ot6UTH2oL71J/ag/DaCBNIjeosH0Ng2hd2goDaPh9C6NoPdoJL1Po2g0jaEPaCyNo/E0gSbSJEqhD2kyfURT6GOaStNoOs2gmTSLUukTmk1zaC59SvPoM5pPC2ghLaI0WkxLaCml0+e0jL6gDFpOK2glraLVtIbW0jpaTxtoI22izbSFttI2+pK20w7aSbtoN+2hvbSP9tMBOkhfUSZ9TYfoT3SYvqEj9C0dpe/oGH1Px+kHOkE/0kn6iU7RaTpDZ+kc/Uzn6QJdpEt0mX6hK3SVrpEnEUIoQxXqMAhzhDnDmDBXGBveFMaFN4e5wzxhJLwljA9vDfOGt4X5wvxhgbBgWCgsHBYJTYihDSkMw6JhsTAa3h4WD+8IE8ISYcmwVOjC0mFieGdYJrwrLBveHZYL7wnLh/eGFcKKYaWwcnhfWCW8P6waPhBWCx8Mq4c1wpphrfChsHb4cFgnfCSsGz4alg0fC+uHj4cNwifChmGjsHH4ZNgkfCpsGjYLm4ctwpZhq7B1+HTYJnwmbBu2C9uHz4YdwufCjuHzYVL4QtgpfPEPjyeHfcK+4Zvhm6H3j6iF0UXRtOji6JLo0mh69PPosugX0Yzo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiW6Nao97VyCgdOOuW0C1wOl9PFuFwu1t3k4tzNLrfL4yLuFhfvbnV53W0un8vvCriCrpAr7Io449BZRy50RV0xF3W3u+LuDpfgSriSrpRzrrRLdK1ca9fatXHPuLaunWvvnnXPuufcc+5597x7wXVyL7rO7iXXxb3surpX3CvuVdfdveZ6uNddT/eG6+V6u2SX7Pq6vq6f6+cGuAFukBvkBrvBbogb4oa6oW64G+5GuBFupBvpRrlRbowb48a6sW68G+8muokuxaW4yW6ym+KmuKluqpvupruZbqZLdalutpvt5rq5bp6b5+a7+W6hW+jSXJpb4pa4dJfulrllLsNluBVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrntbrvb6Xa63W632+v2uv1uvzvoDrpMl+kOuUPusDvsjrhv3VH3nTvmvnfH3Q/uhPvRnXQ/uVPutDvjzrpz7md33l1wF90ld9n94q64q+6a8y4l8mFkcuSjyJTIx5GpkWmR6ZEZkZmRWZHUyCeR2ZE5kbmRTyPzIp9F5kcWRBZGFkXSIosjSyJLI+mRzyPLIl9EMiLLIysiKyOrIqsj3hfeHvqivpiP+tt9cX+HT/AlfElfyjtf2if6O30Zf5cv6+/25fw9vry/11fwFX0l38w39y18S9/Kt/ZP+zb+Gd/Wt/Pt/bO+g3/Od/TP+yT/gu/kX/Sd/Uu+i3/Zd/Wv+G7+Vd/dv+Z7+Nd9T/+G7+V7+2Tfx/f1b/p+vr8f4Af6Qf4tP9i/7Yf4d/xQP8wP9+/6Ef49P9K/70f50X6M/8CP9eP8eD/BT/STfIr/0E/2H/kp/mM/1U/z0/0MP9PP8qn+Ez/bz/Fz/ad+nv/Mz/cL/EK/yKf5xX6JX+rT/ed+mf/CZ/jlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5L/12v8Pv9Lv8br/H7/X7/H5/wB/0X/lM/7U/5P/kD/tv/BH/rT/qv/PH/Pf+uP/Bn/A/+pP+J3/Kn/Zn/Fl/zv/sz/sL/qK/5C/7X/wVf9Vf+/vPrDHGGGOMsX9B/cHxPv/kMfnbyNJXCHHzjoJH/3HNTfn+PO8v93eKCCFe6N2t0V9Go0bJycm/nZuhRFBsgRAicj0/h7ge698eayfK/NP6+stKQH+wfvQeIWL/JidGXI+Xi/biOZEk2om7/sX6zRb/4foLhEgodj0nl/gt/usXKWStX/ZfrL+nwx+sn+ubFCHa/k1OnLgeX68/UTwjXhRJf3cmY4wxxhhjjDH2Z/3l5e5/dH+bdX9eSF/PySmux9fvP//5/TljjDHGGGOMMcZuvJdf6/H800lJ7brwhCc84clfJzf6PxNjjDHGGGPsP+36Rf+NroQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/htfJ3aj98gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zdaP8nAAD//5+IZbc=") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8008, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f0000000300)='./file1\x00', 0x0) unlink(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='./file1\x00') 8.289774383s ago: executing program 6 (id=285): r0 = fsopen(&(0x7f0000001bc0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000140)={&(0x7f0000000100)=[{&(0x7f0000000000)="866d0db80d33be354f0ee8963cdb87f91d471f3381b48158409379e7dd03ba6b9ea917b8091c8b251489474fd7c357c7b4fc8fccea6060c6b23fcf86083fa612a0987ff9c0f651ef78f99568309128e7737e0f0ac57fa1c02454f8a7", 0x5c}, {&(0x7f0000000080)="1d85e2cd30bec17fb2e520a981ddb229ab0a62e1d64997dcef1d28c862fabbd803efabb551646c3920c3bd1aec1a84501f31325619fe148e6a1132a65757", 0x3e}, {&(0x7f00000000c0)="cdf2d1d1f62fa4c53a", 0x9}], 0x3, 0x9b0, 0x0, 0x100000000, 0x8, 0x6, 0x7}) fchmodat(0xffffffffffffff9c, &(0x7f0000001c40)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000001d00)='./file1\x00', 0x40a, 0x103) fsopen(&(0x7f0000001bc0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) openat(0xffffffffffffff9c, &(0x7f0000001c00)='.\x00', 0x0, 0x0) (async) fchown(r2, 0x0, 0xee01) (async) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x80809440, &(0x7f0000000140)={&(0x7f0000000100)=[{&(0x7f0000000000)="866d0db80d33be354f0ee8963cdb87f91d471f3381b48158409379e7dd03ba6b9ea917b8091c8b251489474fd7c357c7b4fc8fccea6060c6b23fcf86083fa612a0987ff9c0f651ef78f99568309128e7737e0f0ac57fa1c02454f8a7", 0x5c}, {&(0x7f0000000080)="1d85e2cd30bec17fb2e520a981ddb229ab0a62e1d64997dcef1d28c862fabbd803efabb551646c3920c3bd1aec1a84501f31325619fe148e6a1132a65757", 0x3e}, {&(0x7f00000000c0)="cdf2d1d1f62fa4c53a", 0x9}], 0x3, 0x9b0, 0x0, 0x100000000, 0x8, 0x6, 0x7}) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000001c40)='.\x00', 0xffffffd3) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000001d00)='./file1\x00', 0x40a, 0x103) (async) 8.284115114s ago: executing program 4 (id=288): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000102, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000400)={&(0x7f0000000500)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000540)={0x0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f00000001c0)={0x0, 0xb56, 0x5}) r2 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004018) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x14a40, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x40880) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.207198752s ago: executing program 6 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a0000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 8.206937222s ago: executing program 6 (id=291): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 7.328065302s ago: executing program 6 (id=293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x02\x00', 0x200000a, &(0x7f0000000140)=ANY=[], 0xff, 0x11f5, &(0x7f0000001400)="$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") write$UHID_INPUT(r0, &(0x7f0000002600)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003640), 0x41, 0x0) setns(0xc9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={r1, r2+10000000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000011c0)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000001200)={'syzkaller1\x00', 0x4000}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) write$tun(r3, &(0x7f00000013c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x4}}}}, 0x36) 7.096124475s ago: executing program 4 (id=296): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000080), 0x0, 0x406242) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x0, 0x2, 0x2f6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b77, 0x10, 0xfffffffc, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb21d, 0x20, 0x803, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a3, 0x80000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xfffffff7}}], 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x44c8, &(0x7f0000000800)={0x0, 0x6239, 0x2000, 0x3, 0x3ae}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000a00)="fe", 0xfdef) r7 = open(&(0x7f0000000a40)='./file0\x00', 0x101001, 0x20) syz_ublk_setup_queues(r1, r2, &(0x7f0000000940)={0x0, 0x6a9b, 0x8000, 0x2, 0xdd, 0x0, r4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xef18, 0x200, 0x3, 0x68, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec20, 0x10000, 0x0, 0x3a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x111, 0x800, 0x6, 0xaf, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ebe, 0x20000, 0x1, 0xae}}], 0x4, 0xfffffffffffffffc, &(0x7f0000000f80)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.818604646s ago: executing program 6 (id=297): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x80000001, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0x1000, 0x8000004, 0x6, 0x9, 0x12000004, 0x7, 0x5, 0x5, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0xff49, 0xb, 0x8, 0x4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x23e, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x358, 0x7, 0x10, 0x57df5d62, 0xdb, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0xfffffffd, 0x2af, 0x10f7, 0x7, 0x2, 0x6, 0x6, 0x4, 0x7, 0x101, 0x0, 0x800004, 0x0, 0x401, 0x752, 0x3, 0x3, 0x2, 0x10001, 0x2, 0x0, 0x7ebf, 0x6, 0x3, 0x80000000, 0xfe000000, 0x5a3, 0x1, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x4005, 0x2, 0x40003, 0x2, 0xd9a, 0xd, 0x2a2, 0xdffffffb, 0x6, 0x2, 0x3ff, 0x8, 0x7, 0x74, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4]}}) socket$netlink(0x10, 0x3, 0x4f747bf2175863ef) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000b00)={0x2, 0x0, @local}, 0x6f) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000004cc19a09bcaf90e441e84b99ae30f88b1e19eabc7d50c7ada4eb344a1c79bee011785786e94139e12686c0f49392d8595ccd1efeb443c1b5068c68b71798eaa4ed37d5f5ca6b31d48fcd083af6551011bb52456805ab7730e4f72d4171ca59fd4491ec5e3af78c64a6a23df165101fcab6e3e5569cd7d589baeff985a6faa1aa54eaa3e5874fdf50b2cde8c2bfc61bf942dfeead4f8b9ad36248d58accb347", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf250e00000008000400cad08a2e1c00028008000300040000000800040008b500000800090000000080080005000e000000080004000e00000008000600ff0700000c00018008000500000000004c000380080005000a010102080005007f00000108000100000000000800010002000000060004000800000008000500ac1414bb05000800560000000500080001000000060004000200000008000600d6030000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) connect$inet(r3, &(0x7f0000000b40)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x2c, 0x3, 0x400000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001a40), 0x800001d, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 5.066358502s ago: executing program 6 (id=300): clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001240)={'team0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x3}}}) write$tun(r0, &(0x7f00000013c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x4}}}}, 0x36) 5.066242213s ago: executing program 35 (id=300): clock_gettime(0x0, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001200)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001240)={'team0\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x3}}}) write$tun(r0, &(0x7f00000013c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x4}}}}, 0x36) 4.669942693s ago: executing program 2 (id=303): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 4.378818283s ago: executing program 5 (id=305): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000880)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000000840)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000380)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.257791575s ago: executing program 5 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@deltaction={0x4a8, 0x18, 0x6638af8a35f2c0e9, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x77000}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xab}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8c81}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x480000}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6e30}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x24000044}, 0x40) 4.249414676s ago: executing program 4 (id=307): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = syz_open_dev$ublk_chdev(&(0x7f0000000080), 0x0, 0x406242) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x0, 0x2, 0x2f6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b77, 0x10, 0xfffffffc, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb21d, 0x20, 0x803, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a3, 0x80000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xfffffff7}}], 0x1, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x44c8, &(0x7f0000000800)={0x0, 0x6239, 0x2000, 0x3, 0x3ae}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x6, 0x0) write(r5, &(0x7f0000000a00)="fe", 0xfdef) r7 = open(&(0x7f0000000a40)='./file0\x00', 0x101001, 0x20) syz_ublk_setup_queues(r1, r2, &(0x7f0000000940)={0x0, 0x6a9b, 0x8000, 0x2, 0xdd, 0x0, r4}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xef18, 0x200, 0x3, 0x68, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec20, 0x10000, 0x0, 0x3a1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x111, 0x800, 0x6, 0xaf, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6ebe, 0x20000, 0x1, 0xae}}], 0x4, 0xfffffffffffffffc, &(0x7f0000000f80)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.148562806s ago: executing program 5 (id=308): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) setrlimit(0xd, &(0x7f00000002c0)={0x4, 0x6e6c}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x402, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000340)={0xa, &(0x7f0000000380)=[{0x7f, 0x4, 0x6, 0x4e26}, {0x6, 0xe, 0x9, 0x1}, {0x6, 0xb7, 0x7, 0x401}, {0x9, 0x10, 0xc, 0x6}, {0xa34d, 0xe1, 0x9, 0xffff03fb}, {0xfffd, 0x7, 0x8, 0x7}, {0x43, 0x5, 0x6, 0x18cc}, {0x10, 0xe, 0x71, 0x9}, {0x4, 0xb, 0x4, 0xfffffffb}, {0x7f, 0x8, 0x1c, 0x8}]}) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='geneve0\x00', 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a00000004000000800000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001740)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x2f8, 0xf0, 0xffffffff, 0x1e0, 0x0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f0000001cc0), {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@local, @ipv4=@broadcast, @gre_key=0xa, @port=0x4e24}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, [0xff000000, 0xffffff00, 0xff000000, 0x100000001], [0x0, 0x0, 0xffffffff, 0xff000000], 'pimreg\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x8, 0x0, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xa, @ipv6=@local, @ipv4=@empty, @gre_key, @icmp_id=0x67}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'lo\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x8, 0xad, 0x1, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "9734"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x17, @ipv4=@broadcast, @ipv6=@private0, @port=0x4e24, @gre_key=0xf1}}}, {{@ipv6={@empty, @mcast2, [0xff000000, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff, 0xff], 'batadv0\x00', 'pimreg0\x00', {0xff}, {}, 0x67, 0x8, 0x7, 0x20}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x0, 0x1, [0x401, 0x400, 0xfd97, 0x0, 0x8, 0x5, 0x40, 0x9, 0x100, 0x0, 0x283, 0x2, 0x6, 0x0, 0x8, 0x6], 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x4, 0x6}, {0x3, 0x0, 0x1}, {0x4, 0x0, 0x6}, 0xfff, 0x5bdb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001d40), 0x141002, 0x0) openat(r3, &(0x7f0000001d80)='./file0\x00', 0x86e440, 0x198) syz_read_part_table(0x5e9, &(0x7f0000001dc0)="$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") syz_emit_ethernet(0x4a, &(0x7f00000023c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140640fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22a953eabdbae83ed932d943d5ece807d74faefd1452cac7f4a9123503b3834b4440ae4a36ee8b3c476076b5b5a29cf5ec4c0afba08575087cf637756c4b24c05b755148fe057dff7bea9baf7585aa9de3c3239530a3a1d9f7e0486a70b3d16347bb138bea82d73253b1638b8900018be528ca132ded1a00c23e3f08fa1dbed1ee18daee43", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="5018100090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f00000024c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5011100090780000"], 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002680), 0x0) timer_create(0x0, 0x0, 0x0) getgid() write$selinux_access(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) 4.026867229s ago: executing program 2 (id=309): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0xfffffffffffffe4b, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) 3.91074878s ago: executing program 2 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000ac0)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e20, @private}, 'syz_tun\x00'}) 2.563427998s ago: executing program 2 (id=311): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$loop(0x0, 0x8000, 0x24a40) syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000001400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x210c04, &(0x7f00000014c0)=ANY=[@ANYBLOB='errors=continue,dmask=00000000000000000000004,uid=', @ANYRESHEX=r0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c696f636861727365743d63703836352c696f636861727365743d63703836312c666d61736b3d30303030303030003030303030303030303030303030352c696f636861727365743d63703835302c6e616d65636173651afaeed418c76ae06173653d312c00", @ANYRESOCT=r0, @ANYRES32=0x0], 0x5, 0x1530, &(0x7f00000015c0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ") openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) (fail_nth: 1) 2.559336889s ago: executing program 5 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0xb, 0x8, 0x2000, 0x1}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r4 = epoll_create1(0x0) close(0x3) userfaultfd(0x80801) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000}, 0x0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x381, 0x9, 0x4, 0x9e22, 0x0, 0x100}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000001c0)={0x2004}) getsockopt$packet_int(r3, 0x107, 0x9, 0x0, &(0x7f0000000040)=0xa) ftruncate(r3, 0x0) 2.338193371s ago: executing program 5 (id=313): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xb0, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_NOMASK={0xc}, @ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "e239b657010500086606e8aaa6846a29f5dc80562a97343c3a5d061b6c2b5013e66d96d623ecc51150502fbe8076b4ce32344b97958361bbbc4073ed15c1405409095b5c40c1b3ca7c239b1712d9b76c4cf7b975e758c9f999f2a1d404c68d6e7dbc059009e850cce8546273f00f"}]}]}, 0xb0}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x1f, 0x9, 0x2, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4044090) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48851}, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 2.323140713s ago: executing program 5 (id=314): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)={0x10, 0x8, 0x58, {0x58, 0x3, "22612a7c00455611d8cd683391199cfa2dfc4207d1e4fe82c51ab19eaaa7c7e3a3927264f690caf0c64089e750dde23cdfa1b0806788e974d52d218b3470791243911440d6d1bf388f1bb9267ae665de5d2279fc1ab8"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000002c0)={0x0, 0xf, 0x88, {0x5, 0xf, 0x88, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8}, @generic={0x4f, 0x10, 0x0, "06c15db828fab7b8eb945c2167d84bab648ac7c8f3fd05c5c93aee821870b3b74be4bb80425eb05b60ae4de869815f7bc74c4c2c37c589e2b78a709be736544c6fccce17535f9e12f939af39"}, @ss_container_id={0x14, 0x10, 0x4, 0xf5, "070038fd8f06dd45092a10615218747e"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x6, 0x468f}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x2b, 0x7f, 0x400, 0x3}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x4, 0xc, 0x30, "dd10bea0", "d4844433"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x10, 0xd, 0x7, 0x3, 0xa20, 0x8}}}, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x20, 0x9, 0xe1, "94ecd3934b520909d0d12dbb17f24b3088561f9377c7594e1fba19c759c409c61dd1d168f8a0fd12458ec355f4d91f641db7cf00102461a6631a82acdf9ab1a8194c2611e5f29713825e20d53a3d8c5af6ff288a8fb23b6d6a9f31f0c521d8de05bc500623ba450eff81ccb2728bb3aa2c1e8b3035e9f027f9cb0bfa23d0c06d82a710d0cec3715ce433643e4e53cc50a6394b2e760fc81b8a91e14cbef04648872f99be6295dd26f38c6e8c63cd7b45fe5553bb71c3b460d5d851d0e7669b67e7c5ba66ce3d76e51371ccc6d45ce6d5f4ec2f6eeee0e6a11c41c060c4faa54385"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x101}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000840)={0x40, 0xb, 0x2, "03b3"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000900)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x19, 0x2, "1129"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0xfff8}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0xfd}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)='{**,\x00') mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x40f4, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x0, 0x3, 0x3}, 0x10) 2.140926151s ago: executing program 2 (id=315): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 1.605630466s ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 1.483085649s ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 1.341959083s ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 1.208424457s ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 1.07994576s ago: executing program 2 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002a40)={0x11, 0xd, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000fbb14b3900195a2c11c24514210d1c4266ce8de8cb6eb35807d90d65c78f05bd80d815b500a2f688b5f69461c7efe2d63a2ed64d5e6c29d64bb239de1712de8d25fa0e7f8cdcf081e1dc380fda8cf8f9fcb28ac9af9833a372ff2669396abcc6f9750cbc94d9d99a3f42b77bec2b632e4784838cf9fae705edd812da6eb7", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000002b80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000002c00), &(0x7f0000002c40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c80)={{r3, 0xffffffffffffffff}, &(0x7f0000002cc0)=0x20000, &(0x7f0000002d00)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000002d80), &(0x7f0000002dc0)=r0}, 0xfffffd6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002e00)={{r3}, &(0x7f0000002e40)=0x2000000, &(0x7f0000002e80)=r1}, 0x20) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000009c0)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002ec0)={r3, &(0x7f0000002f00)}, 0x20) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000001580)={0x0, 0xe863, 0x20, 0x20000001, 0x2ef}, &(0x7f0000001600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c26, 0x102, 0x0, 0x200}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f05, 0x20040, 0x0, 0x33d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5652, 0x1000, 0x2, 0x40256}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5cd8, 0x80, 0x1, 0x121}}], 0x4, &(0x7f0000002880)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x2, 0xf4f, 0x0, &(0x7f0000001880)=@buf_max_buf="e8bb473b3c25bd0025ff87420e2df6c3d7217323a25ec47411d74f9bb68a86e5e0814f53bbb7a656a25a08efa6376b90ed188df0c549d67fc88980cbf83b233b0e6328e49f2f6dd3b91a1902903f7a66846bdc61b4c2d03cd4c9a52b8d1b5c4aaf5fbe0b7175f50f222530ebcd72cf0c91a4b5d5acbedf1d9da41e0007d5af52f045014e75bff72ed6efe2a61a0f5a50ba840652897f5517876728d52fa7fdbc06a03eb8ef31827da87d7e659ecda48c24d33e4412d6cfcf1d2b2dcdcded298c257d07a275bee16430de32567aed853f997d6a5cbce8355a56a233a31b3a6e608a20f4e866e9836b35dc6692b87b8946d51e5fed44e6088b16732440b9120bc39640e7a8d72948d07fc537eb621255c599f6e37d8a730384720505bd653e87e01defbe1d8a3a048bb35f7c3ca530be2ffa4e2199ce74af0421f7170082dd8c63a38673b6ece305c686b56d8ca64105a4905a2b26612da3640da534ab0c16df567c3b804ea24dc18400dc5de616ecc835f309800b126b8f238b9a78c1a13a80fd4eb1170918d9db44a88b6414c90702e766184802b89e62ea3809576ee2145a771787a7edd2a868034a309b866e83cc117cc5c54ca96c3f620a8c467ba3615e2f94419ff6fc5c9a819602d3af245b50ff9593eb57640c3c869bef537ab7225538ee218c6dfe14f945ce605c6e8d6bb5286956d4fde7d81b980eaee64e35be92d9fe7bdd8064e511c48672479aa7f77bd08df839cfbd0e8c0e07d13f1f840a5f91dae39a554cca0af08ea969e8409767e5740b1d4b8c4fe24161deb55f3176decf41b19e036d6d6a9f95734cbd1bd86503e1385a2a992240344eb48f75d7125eee60d896684b1f2dc96394e743d803dab678ef5f23ac67c1d35b507814709dd1a9b7435d3cc2b9c2327d94891ff90dcb6e16dba1dc53ef58a4ce28565d4fed43104b8ffce73125711c04510be8ad5d7bdfe3f4e85bb0a2e53ccdf05b28a1cacd7b713ad136c29e7b62873b7813ed736eefd44a164cb4dc793726b403da84d4ae414597e261175b3b13767d966e8a127210bcf57416ec532c80acf6368b158b27bcc9a80fc42f6a55c4158c13851bd94bb7ad3cc0ef5734b52fefb43f1587d083a14e959aae8d9e73bded3a27b90d0949f90f4440573e82256192c24c8522aef8f10569f4843510bb181ec7716edabbbcb4eda19fe2ea76f98012b9b306d0269bfc43c8e13154e1f2c0f985a0f1882cd7f7e4445521db4fa4a0ce69524d825fe4f7a5360de95eb1f27432d88d1d452fcdccf7d9dc2bb172bee42a94940cfc86706ef48a918ec059b6df5a3cb5fc9e5591d36b77b55e14d58a7ec139fc17fe8cb3f71b64438ba97227e5192bd671156900c085f246e4a252c107fc00fc1a4e6e70bca1ec532f268f2022c28bc8cde286bb14598d999bff7946731ccdeb7882e4898a9764e246be545776b0477ca40fe29da4828ef5b8306fcc60515b08b7e67909e0f84d32bd4bf1b64b31c2636470d8cf19353aecffbbca250ead40b5dfdb6242381b9cb23e6c37c7f3c1ee31daf0d8d76148da66db5c51a8c9c70416a62d6d94bb2fcb2104c8fc3a7ff35a545afd4cf729f47d989e40e1f0fa9138a524fbe7beb1db7e99a2ebe53f3249385192e5e9455803c382993941f35452e837be9423fe0e7e95dd4a991b1153577752b0e5628951a74eb52bb0008d0494e9b28c0efd43f1ac01df007d429eed13a97cd51bd9432be67a88f0f26a458336913f470fe613b704e22e099d64843f9b861ff62719dd879742c9a71f7f33ef4b19e918ba259707a35675cbc171964ac427b599d6fdc46d7f7fc093e8a39124670c701e6edc5e0fde54c5b757acd1549bca6ff62a5469de2a0f9ae699c529dd00349ce8381f1915b1179b035bf6dd9b8b43af3ff14e72ff2d8fb29e9298b873e9f77a47661894a109579e9546b116bd55db89317f782441f7efba78387d2b2a33336fdc2a81ed45be8f2c253db39fde35b9f1b22e45e1cdf51bd5d8241046d1f596bd7341dddb4bc1f747b7aaf459111cc356127951d7ecaf1d78c7c0929c240d0a7d22d7805ecd1988800a0da3c1868a34da3ab8e5f528350222ba5021e36d5665f7fe35ffd1e962f464e6a1e5de785bc3af8576dcb30a91e00ee07b5b48afd330931c7c9788d11128d18900d55f8d2c0016876d4bf9027e59b489a04bef5883c13fb42689f4e0d1c20b69051089aa4f3d7e85886e9de3012538670919b3ce5497e4bd659b100aca7d3ec076b9e7ec68c8017e6ef43373a24bb29b7da169fa6877bc31247bd9096410d570f3e90e69ba669c892904bc1730ff10ce04121167195e926fab89581d8e29ac066aeec85dec9797dfb4fa9b2280ab8ee7f063c14c1fea98cc14707efc69a75a4110eb0308c02670ad4b193f232528d3a30852be2115326984800d0c07b7d12240c4fa118f7e61647b6ecfaa534ab227c1ebfd9d52be2f59d5227697d0a7cfa40ea08f542ca5a7f8dde87a58d4ace58d9e2794393160938143a975eb31a06e2aa7fc8dafa02626e0787f06e82f20c654818a8edaf377de8c2485b13da5045d5932cc3e39030200965a8d6ab5db5a5ab2fed44a93bf3b8f858d6c9b26a2c5302ed6cc8e584e54748e0cd74222a84d94255e3faaa9320552e1bba406fbd7c91816740c14ec2e211e11922ee9e8588925a4be14840e76752b850a6687139b6bf5b6687ad667ad328854bdc41567822c281045cc93cbc991897fd0ffce104c391baeeadeceff4d90ce29891b8670ab8c1c46ecdac85fed003a6dd6c6e0ba497bc3be19551e1013fc9e64e9fca54f03f7724a5abdef2545c2ed3e8ffc5b1568e276d765748bdbd20bb0e1871b03448cec7da8c91ee76149c3631b3abac3c61acbf49d379381a555f5b7a6fa9480629b4f1836eb3998b1bdaaa448b8f9ded302b8a1d061244b1464285118450a7ad972a82718a953afac9069f9ffcb5a5e5318cfbf4054e4b2c2ef82eb14fb6a1fa6b882d311a931143e2c7fe8910aa35f1434d11e1e26339e38d6331bd94f079e0879307ea1b6c0fc6c6fef60d2381c23c9ba1a948ea9ce9d2f5eb3f3b10d79046a15c0a45cc0812ea4bc451646b959d42032006be987ffb47f34929308edc43241b297ecb62c8b48c867c54cff4e04f48fd4bc628c3ad6e9311a539cc497da82f8ea488c92c32c678629728f0e107255c2de2da379b549864c11dc5acdf28a977d9513715ec8c835d8fbbda47df6f89900ae3447bfb8b522f0216f33116754f9e7eb429e98a68a51a3bb885f3b2708a088196d7159fae64b282f1f0f1fb687a3311eb4df62bc5fc29ed39381273abca14b80424c35b939a7dc523862d6e746b23200fe5d5d68e91de42383042ebd7155514627ad7b0d37e1b56452606011118c8f35fb25a0a8b40e92afb4c0405f0044440dd78ab06ef5f9ff6f7086ba5fa2d2fe2414cd9262f4615c6bed39801da9a0a63045ee7a294fda7df930d3221dfb7c7d6dc625c92931a9e78586734fadf3c00a0bcaae61c2407776ea86d6de2e37ed4c18fa6020a1bfe55fa745d9a72a1eee1d63e0fff40d999314b8b1c64cd225dad7ef073ee94549154fde9b5b2accc19ae4b7b1c25b3d97c78368c9e62d987c68458dca7b349980140ff05cdd0ad7480f4362af01b7edc49a659f59ec4838cc58a47f8cb7cb16ea0b90ea1c5d9f1b129c0c14958c44d7483b95aa837509423e012e37fdea1654a09af19fb5539c91ab0dccfdf49b95f1ea8f73d9db29ffc23ed3f1a05f5e99b4a5e89e5f099a185aefe48f47d6cc86c5f4c972bb00cd054bd9d9b7ec35f034041ea18969686f5215bef5ebcee355217615b751df560234eb3d4f5928045698ab3e8d06fce1c2dec67d0fb04e8ce54cfdc8697f1aa160c2564bfc393b8a6c6421bfade7664a580efb5100a767ad880aef3eee43139af6e6212e8903de083cc0763b3d4f59cff780a5a7450cd85af0c5e9f9c849e171a449eeff034d7ba467efe785602f48b4c834328c0c3d01ef57b50a82b22e638d2074e55940f98bef41c4e3554bc3d72e67fcbb8d8e36d223056c159d361d6d44ea4f29b38f311f85f3550d0d2136524e016b01db3faf637ebca3cb7690bc60d3c6bbf18b92f80f9c8c411f428d4afc3817510763c7ed5e11b9587f00cd18bd6f2851a0fe200344273988e687929d063d2808c2ed245afa396aa96dabfaf3c2cb3f5799c7f1f5e92b41bd0a94f9dbd4e384c0a6408f9680d68063cf8cf3f2585c42d3ef520c45ac742c8d000b5b1834dae2bfc29b8f0a11c53bdb591abe1c57ed05b8b0cd5024bb343febff519b59304c1b148fc1d4ba49cc82650f50b836802df1157b2224b3d3fe241af692e04ed055c1513dae090f1829052a2f5ffc4ab51f93f66c1fd92437620ff874efe159733c344a93d377a4d98be44e5d776904759e7b3a2295657d3e110c4bb52aed15b8c86fb611c49747e3e2e130edd59089ff397b99e86a20cc7adeb25523df8581183edd9d0300cef5a810537a06baa82ca3e8804f1d6008467a16ddcf438a91b8341a0e43633c0a3498d16c10d1211d3d217c466a46c31c5c57e44fbf4a089d99a91568d002a694efea84c132a79908d3b6fee247ff79322ff5de6f3409b82b52fbf3759cc3d3e2541b78fbf182ca7e161901e02d999c527b3f01fa3ff9fba42785c73f1a77a6b81e081055b601b6a27aaf32810652df1afdbf9f652ea39d57b518430bb8928bd2733fb84a21e26012faef3117189d3ae84499858e26e9dd4663950e2e8e476cc640d2c06dfe376232f4f36a2356791cd655ac164b5a8a9bc7c3d36c1e21e168a23ed82fd6f6447e74ce875d125db6141213eb4ad1c9b64d04d83ec76dad26f4a722bbd293bdd8d60de80e38b2c2f643f95ae5ead537cf527d805b0be53cddac97db697f83f26d7aa8fefd1f6a38f7f36e2aba8b27791df2576f8b22e7484686737fdb14871a35dac4fd6d6fd1595c959fa38b76c6e17535e3040bce4feaabc6679141af37ef35d7d0e8c12345159ae3d6267b5501e179156784544109a31bbef64cb4aaab68ebf3ee66f2c41ed8e1689ca14a49ce604afb92765d34f32747e1759bd43f0335bb9690b0125a17fa0a9fd07ee76c464b2d3d7846d5d1f1d9b32c44fa0ad560e741a8fa9e509ac6df5c9891827411ac6c4fd2bc63400e7fb2174ed71f222e7c5bab43d248f1c5829a43061b763cfc49cd8824cd442348ae4f0cbf232a3cf0750128b298baf8d2bed9ccff19df85cbcb07adba308125438345966ee7d3e5c93933af3956f31ed64607d24329d5ec76ca391d5a8f60c76cd57bfd8e3b510c9cbc144eae7c56a807bbcfb26752ee5d8e6aabfabb5cdc3b4a0dd4592a8b47b4dff1cc9b1e6187ed8c1e6c4ab40ce1a71e7e7b7ac68f0502d067a952a4186ff8e766d202965288009bac5066371a4e310469f570888d987c5b95217f755786260b7c76f953ce4975407cf2a179116b7a44740deee6e98ba388f6daceedf4ecf7e25dc815ab549148b5ff8a7605a883fc041459e3e6d080658fb43d8514b69a93cac8ad23f24c6b96c115d291324c96bf875d20f902f9ea8bfc7d152516795b2f871e2b2d9b1fbd763b604b89f504bdafcb175fde6f152dc8266006469340eb9ff2ca026ae0ae24ec4899fd626cc394ea3023c3ce76fd2a603cf7276f75810204c36c0fb8912916bed9ca8b8f0fa1269cdd6572625386ba1e16b4e1c3598a0ec1f14c428208a46b15ee0d0417538470318917c01e199ebd93d2c8fc18e18f7660"}}, &(0x7f0000002900)) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x8, 0x30, r6, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r7) r8 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x39, 0x33, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f00000001c0)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x27}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f00000002c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x35, 0x65, 0x38, 0x30, 0x30, 0x30, 0x35, 0x30, 0x64, 0x62, 0x30, 0x66, 0x30, 0x33]}, &(0x7f00000003c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x3, 0xc, &(0x7f0000001400)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000001480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000001540)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb6d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) request_key(&(0x7f0000001240)='id_resolver\x00', &(0x7f0000001280)={'syz', 0x1}, &(0x7f00000012c0)='e8dab99234bb312e', r8) r10 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x4d82f289c01af5bc, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x36, 0x30, 0x34]}, &(0x7f00000004c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r7) r11 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f00000005c0)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @auto=[0x31, 0x31, 0x39, 0x30, 0x61, 0x65, 0x30, 0x30, 0x30, 0x35, 0x21, 0x30, 0x65, 0x66, 0x36, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x19}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000740), &(0x7f0000001100)={'fscrypt:', @desc3}, &(0x7f00000007c0)={0x0, "00112233445566778899bdbbccddeeff00112233445566778899aabbccdf2233445566778899aabbccddeeff000000000000000000000400", 0x40}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000a80)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000ac0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000b40), &(0x7f0000000b80)={'fscrypt:', @auto=[0x61, 0x36, 0x30, 0x33, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000bc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r7) add_key$fscrypt_provisioning(&(0x7f0000000c40), &(0x7f0000002940)={'syz', 0x2}, &(0x7f0000001140)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYRES32=r10, @ANYRES16, @ANYBLOB="5eba5903d388455b6562a17106b60efb578b53af9a47e33fc16127e355af91945a20640c62f609aa8aa29eb4b3e73ab3220c95812a5bccbee4a373559280084f6ade347085683b03477c0c9f392ab1a699866308470156b412040b347f8b55af71f1c888b006e992d74bc9b6620a397cd91f1701a934b5dac7e79c989dd7e47e2196ecf2b313970f370b9bf57dd78286755fffdc624f1fd3a9339cd64c85a96c", @ANYRES8, @ANYRES32=r1, @ANYRESDEC=r0], 0x48, r11) add_key$fscrypt_v1(&(0x7f0000001300), &(0x7f0000000c80)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x65]}, &(0x7f0000000cc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbeeff00112233445566778899aabbccddeeff00", 0x15}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000d40), &(0x7f0000000d80)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000dc0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r7) 1.07878346s ago: executing program 4 (id=317): symlink(&(0x7f0000000440)='.\x00', &(0x7f0000010d80)='./file0\x00') lsetxattr$security_capability(&(0x7f0000010dc0)='./file0\x00', &(0x7f0000010e00), &(0x7f0000010e40)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) lchown(&(0x7f0000010e80)='./file0\x00', 0x0, 0x0) 1.07869794s ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 897.805518ms ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 749.111843ms ago: executing program 4 (id=318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_dev$ublk_chdev(&(0x7f0000000080), 0x0, 0x406242) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000400)=0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x20040, 0x1ff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000480)={0x0, 0xfffffffd, 0x0, 0x2, 0x2f6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b77, 0x10, 0xfffffffc, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb21d, 0x20, 0x803, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x87a3, 0x80000, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x1, 0xfffffff7}}], 0x1, 0x0, 0x0) syz_ublk_setup_io_uring(0x44c8, &(0x7f0000000800)={0x0, 0x6239, 0x2000, 0x3, 0x3ae}, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) write(r4, &(0x7f0000000a00)="fe", 0xfdef) open(&(0x7f0000000a40)='./file0\x00', 0x101001, 0x20) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 749.004423ms ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 629.888766ms ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 427.689986ms ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 266.282923ms ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 135.418816ms ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x31}, 0x14) 0s ago: executing program 7 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x20, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="7910580000000000690030000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x7}, 0x94) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000800), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000840), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) r6 = syz_open_procfs(0x0, &(0x7f00000008c0)='net/netlink\x00') preadv(r6, &(0x7f0000000900)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/185, 0xb9}, {0x0}], 0x3, 0x162, 0xb) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES8=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000c00)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="2400000000000000290000001b2f4bc3ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000010000000000000000000000711814000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./sys\x00', &(0x7f0000000e80)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000ec0)='unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000f00)='00:03', 0x5) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fbdbdf251000000030000380140002006e657464657673696d3000000000000008000300030000000800010001000000060007004e2300000800040006000000240002800800050001000000080008000400000008000700f9ffffff05000d000100000014000380060007004e22000008000300040000006417d894eb657e5271fd0e4445ab56e9456b94e87256f3af28f0e0fbaa963fdf"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5800000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="000c0000001404802c0012800e00010069703665727370616e0000001800028014000700fc0200000000000000000000000000e3090001"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x40088c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = fsopen(&(0x7f0000000480)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 102.536:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=329 comm="syz.2.7" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfeb59f559 code=0x0 [ 32.354157][ T334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.364632][ T28] audit: type=1400 audit(1792812102.536:116): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.378089][ T332] EXT4-fs: Ignoring removed nobh option [ 32.410742][ T28] audit: type=1400 audit(1792812102.596:117): avc: denied { write } for pid=325 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.422480][ T330] syz.4.5 (330) used greatest stack depth: 22112 bytes left [ 32.450015][ T28] audit: type=1400 audit(1792812102.596:118): avc: denied { read } for pid=325 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.455397][ T332] EXT4-fs: Conflicting test_dummy_encryption options [ 32.494645][ T334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 32.516620][ T334] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.561573][ T332] loop2: detected capacity change from 0 to 256 [ 33.214838][ T337] capability: warning: `syz.0.9' uses 32-bit capabilities (legacy support in use) [ 33.300395][ T353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 33.313511][ T355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'. [ 33.420913][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.430935][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.476348][ T287] EXT4-fs (loop1): unmounting filesystem. [ 33.573805][ T367] loop1: detected capacity change from 0 to 4096 [ 33.600684][ T367] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.613433][ T358] syz.4.11 (358) used greatest stack depth: 22088 bytes left [ 33.625431][ T367] EXT4-fs (loop1): Test dummy encryption mode enabled [ 33.638941][ T367] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c1a8, mo2=0003] [ 33.652021][ T370] loop4: detected capacity change from 0 to 512 [ 33.660724][ T367] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 33.683336][ T372] loop2: detected capacity change from 0 to 512 [ 33.698726][ T370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.699847][ T372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 33.713119][ T308] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.724962][ T372] System zones: 1-12 [ 33.740462][ T370] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.740586][ T372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.15: missing EA_INODE flag [ 33.787350][ T372] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.15: error while reading EA inode 12 err=-117 [ 33.917100][ T372] EXT4-fs (loop2): 1 orphan inode deleted [ 33.958641][ T308] usb 4-1: Using ep0 maxpacket: 16 [ 33.976103][ T372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.048978][ T308] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 34.158864][ T308] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.338511][ T308] usb 4-1: config 1 has no interface number 0 [ 34.786275][ T308] usb 4-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 34.846018][ T291] EXT4-fs (loop4): unmounting filesystem. [ 34.886967][ T308] usb 4-1: config 1 interface 105 has no altsetting 0 [ 34.932878][ T308] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 34.962280][ T308] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 34.975947][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.992269][ T387] loop0: detected capacity change from 0 to 512 [ 35.001257][ T308] usb 4-1: Product: syz [ 35.013391][ T287] EXT4-fs (loop1): unmounting filesystem. [ 35.033741][ T308] usb 4-1: Manufacturer: syz [ 35.049298][ T387] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure [ 35.064110][ T308] usb 4-1: SerialNumber: syz [ 35.152564][ T392] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 35.167208][ T392] overlayfs: missing 'lowerdir' [ 35.321352][ T308] aqc111: probe of 4-1:1.105 failed with error -22 [ 35.382822][ T395] loop2: detected capacity change from 0 to 512 [ 35.446492][ T397] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.510125][ T395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.520806][ T395] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.583070][ T393] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.20: Failed to acquire dquot type 0 [ 35.598235][ T308] usb 4-1: USB disconnect, device number 2 [ 35.655663][ T290] EXT4-fs (loop2): unmounting filesystem. [ 35.787688][ T414] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 35.804286][ T414] overlayfs: missing 'lowerdir' [ 35.837365][ T415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 36.385045][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.780649][ T432] loop1: detected capacity change from 0 to 512 [ 36.797121][ T432] EXT4-fs: Ignoring removed oldalloc option [ 36.826904][ T432] ext4: Unknown parameter 'measure' [ 36.873935][ T432] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 36.916696][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 36.923567][ T19] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 36.940252][ T19] usb 5-1: config 0 has no interface number 0 [ 36.966608][ T19] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 36.995216][ T437] loop1: detected capacity change from 0 to 512 [ 36.996692][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.034264][ T437] EXT4-fs: Ignoring removed oldalloc option [ 37.052015][ T437] ext4: Unknown parameter 'measure' [ 37.072006][ T19] usb 5-1: Product: syz [ 37.081050][ T19] usb 5-1: Manufacturer: syz [ 37.086748][ T437] loop1: detected capacity change from 0 to 1024 [ 37.094495][ T19] usb 5-1: SerialNumber: syz [ 37.156974][ T437] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 37.172541][ T19] usb 5-1: config 0 descriptor?? [ 37.204738][ T19] smsc95xx v2.0.0 [ 37.281376][ T437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 37.295999][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 37.296010][ T28] audit: type=1400 audit(1792812107.686:193): avc: denied { mount } for pid=436 comm="syz.1.31" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.367084][ T28] audit: type=1400 audit(1792812107.736:194): avc: denied { mounton } for pid=436 comm="syz.1.31" path="/9/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.419229][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.438577][ T28] audit: type=1400 audit(1792812107.826:195): avc: denied { execute } for pid=444 comm="syz.1.33" path=2F6D656D66643AF365099F9138C07901631F6E7578202864656C6574656429 dev="tmpfs" ino=1037 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.622742][ T453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 37.635221][ T453] overlayfs: missing 'lowerdir' [ 37.658259][ T417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25'. [ 37.951545][ T28] audit: type=1400 audit(1792812108.336:196): avc: denied { ioctl } for pid=416 comm="syz.4.25" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17004 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.005800][ T455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 38.050342][ T28] audit: type=1400 audit(1792812108.426:197): avc: denied { mounton } for pid=454 comm="syz.0.37" path="/8/proc/sys/net/ipv4/conf/default/accept_source_route" dev="proc" ino=17012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 38.096127][ T28] audit: type=1400 audit(1792812108.436:198): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.198767][ T460] netlink: 1320 bytes leftover after parsing attributes in process `syz.0.38'. [ 38.236846][ T434] loop2: detected capacity change from 0 to 131072 [ 38.263335][ T434] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.326024][ T434] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.394450][ T28] audit: type=1400 audit(1792812108.766:199): avc: denied { watch watch_reads } for pid=433 comm="syz.2.30" path="/5/file0/bus" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.435620][ T28] audit: type=1400 audit(1792812108.766:200): avc: denied { setattr } for pid=433 comm="syz.2.30" name="work" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.446475][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 38.465439][ T28] audit: type=1400 audit(1792812108.766:201): avc: denied { write } for pid=433 comm="syz.2.30" name="work" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.487866][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.510906][ T28] audit: type=1400 audit(1792812108.766:202): avc: denied { add_name } for pid=433 comm="syz.2.30" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 38.649116][ T19] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 38.668974][ T19] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 38.679243][ T19] usb 5-1: USB disconnect, device number 2 [ 38.706797][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.898217][ T310] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.912452][ T310] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.927630][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 38.937517][ T310] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 38.952560][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.970790][ T310] usb 3-1: config 0 descriptor?? [ 39.111647][ T472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 39.125927][ T472] overlayfs: missing 'lowerdir' [ 39.610947][ T434] bridge0: port 3(syz_tun) entered blocking state [ 39.641575][ T434] bridge0: port 3(syz_tun) entered disabled state [ 39.681879][ T434] device syz_tun entered promiscuous mode [ 39.692531][ T434] bridge0: port 3(syz_tun) entered blocking state [ 39.701249][ T434] bridge0: port 3(syz_tun) entered forwarding state [ 39.889688][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 39.898168][ T310] usbhid: probe of 3-1:0.0 failed with error -71 [ 39.911040][ T310] usb 3-1: USB disconnect, device number 2 [ 40.864779][ T487] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 40.877824][ T487] overlayfs: missing 'lowerdir' [ 40.902094][ T43] bridge0: port 3(syz_tun) entered disabled state [ 41.210985][ T493] loop1: detected capacity change from 0 to 512 [ 41.225842][ T493] EXT4-fs: Ignoring removed oldalloc option [ 41.241586][ T493] ext4: Unknown parameter 'measure' [ 41.346224][ T499] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 41.359826][ T499] overlayfs: missing 'lowerdir' [ 41.544053][ T493] loop1: detected capacity change from 0 to 1024 [ 41.554751][ T308] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.690835][ T493] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 41.786922][ T308] usb 1-1: Using ep0 maxpacket: 16 [ 41.790905][ T493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.794877][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.877982][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.905660][ T503] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.46: corrupted in-inode xattr [ 41.925833][ T308] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 41.941697][ T505] fuse: Unknown parameter '1' [ 41.954871][ T505] overlayfs: overlapping lowerdir path [ 41.962186][ T308] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.966475][ T505] Zero length message leads to an empty skb [ 41.981795][ T308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.996757][ T308] usb 1-1: config 0 descriptor?? [ 42.027099][ T287] EXT4-fs (loop1): unmounting filesystem. [ 42.098877][ T505] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 42.124008][ T509] loop3: detected capacity change from 0 to 512 [ 42.146795][ T510] netlink: 33 bytes leftover after parsing attributes in process `syz.1.50'. [ 42.167523][ T509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.189490][ T510] loop1: detected capacity change from 0 to 512 [ 42.242269][ T510] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.291394][ T509] EXT4-fs (loop3): 1 orphan inode deleted [ 42.298958][ T509] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.310212][ T380] __quota_error: 9 callbacks suppressed [ 42.310224][ T380] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 42.310368][ T509] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.320260][ T380] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:5: Failed to release dquot type 1 [ 42.374396][ T510] EXT4-fs error (device loop1): xattr_find_entry:297: inode #15: comm syz.1.50: corrupted xattr entries [ 42.410492][ T510] EXT4-fs (loop1): Remounting filesystem read-only [ 42.419621][ T510] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.420714][ T308] microsoft 0003:045E:07DA.0001: invalid report_count -988595816 [ 42.447524][ T510] EXT4-fs (loop1): 1 truncate cleaned up [ 42.463618][ T510] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.489939][ T287] EXT4-fs (loop1): unmounting filesystem. [ 42.506771][ T308] microsoft 0003:045E:07DA.0001: item 0 4 1 9 parsing failed [ 42.517308][ T308] microsoft 0003:045E:07DA.0001: parse failed [ 42.536737][ T308] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 42.571134][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 42.634125][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 42.656294][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.685871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.712398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.749981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.805347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.827504][ T24] usb 1-1: USB disconnect, device number 2 [ 42.832152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.864373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.882249][ T288] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 42.913978][ T534] loop1: detected capacity change from 0 to 40427 [ 42.915187][ T288] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 42.951428][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 42.967315][ T534] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.967631][ T288] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 42.982331][ T534] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 43.019862][ T288] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.052069][ T534] F2FS-fs (loop1): invalid crc value [ 43.069746][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.084682][ T534] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.094047][ T288] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.138459][ T288] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.159106][ T534] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.169004][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.177964][ T534] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.195305][ T288] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.209245][ T542] loop2: detected capacity change from 0 to 256 [ 43.243399][ T28] audit: type=1400 audit(1792812113.596:212): avc: denied { getopt } for pid=539 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.279731][ T288] EXT4-fs error (device loop3): ext4_empty_dir:3145: inode #11: block 4: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.317133][ T542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 43.341539][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.357360][ T288] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 4: comm syz-executor: path /6/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=7947, rec_len=12, size=4096 fake=1 [ 43.432613][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.468901][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.790035][ T28] audit: type=1400 audit(1792812114.176:213): avc: denied { watch } for pid=548 comm="syz.4.58" path="/8" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.844330][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.851427][ T534] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint [ 43.861667][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.892900][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.910574][ T288] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 43.957814][ T534] syz.1.54 (534) used greatest stack depth: 21120 bytes left [ 43.990079][ T28] audit: type=1400 audit(1792812114.376:214): avc: denied { write } for pid=555 comm="syz.2.60" name="enable" dev="tracefs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 44.036338][ T558] loop2: detected capacity change from 0 to 512 [ 44.047697][ T558] EXT4-fs: Ignoring removed oldalloc option [ 44.061780][ T558] ext4: Unknown parameter 'measure' [ 44.080704][ T288] EXT4-fs (loop3): unmounting filesystem. [ 44.136705][ T39] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.147309][ T558] loop2: detected capacity change from 0 to 1024 [ 44.163611][ T558] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 44.219729][ T558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 44.346828][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 44.354462][ T290] EXT4-fs (loop2): unmounting filesystem. [ 44.355189][ T39] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 44.394170][ T39] usb 5-1: config 0 has no interface number 0 [ 44.415951][ T39] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 44.435507][ T28] audit: type=1400 audit(1792812114.816:215): avc: denied { mounton } for pid=570 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.472523][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.480403][ T28] audit: type=1400 audit(1792812114.826:216): avc: denied { create } for pid=570 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.493342][ T39] usb 5-1: Product: syz [ 44.512305][ T39] usb 5-1: Manufacturer: syz [ 44.518797][ T39] usb 5-1: SerialNumber: syz [ 44.527097][ T39] usb 5-1: config 0 descriptor?? [ 44.535734][ T568] loop0: detected capacity change from 0 to 512 [ 44.545310][ T39] smsc95xx v2.0.0 [ 44.549376][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.566508][ T570] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.577092][ T570] device bridge_slave_0 entered promiscuous mode [ 44.589835][ T360] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 44.618081][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.625800][ T570] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.653646][ T570] device bridge_slave_1 entered promiscuous mode [ 44.680144][ T28] audit: type=1400 audit(1792812115.066:217): avc: denied { create } for pid=569 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.710787][ T577] netlink: 'syz.2.65': attribute type 3 has an invalid length. [ 44.757470][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.765632][ T579] loop0: detected capacity change from 0 to 4096 [ 44.766882][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.766973][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.777833][ T28] audit: type=1400 audit(1792812115.096:218): avc: denied { write } for pid=569 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.792253][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.871340][ T579] EXT4-fs (loop0): inodes count not valid: 64 vs 32 [ 44.898310][ T380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.909876][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.922790][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.937528][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 44.959448][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 44.972502][ T10] device bridge_slave_1 left promiscuous mode [ 44.981591][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.993627][ T10] device bridge_slave_0 left promiscuous mode [ 45.001965][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.013643][ T10] device veth1_macvtap left promiscuous mode [ 45.018013][ T560] loop1: detected capacity change from 0 to 131072 [ 45.021276][ T10] device veth0_vlan left promiscuous mode [ 45.041514][ T560] F2FS-fs (loop1): Found nat_bits in checkpoint [ 45.052782][ T28] audit: type=1400 audit(1792812115.436:219): avc: denied { sqpoll } for pid=578 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.131363][ T28] audit: type=1400 audit(1792812115.516:220): avc: denied { create } for pid=578 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 45.169714][ T560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 45.213989][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.232511][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.255053][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.265408][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.279343][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.291227][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.302658][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.312506][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.334186][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.346214][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.364712][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.378580][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.400428][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.412421][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.434268][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.445027][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.457138][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.471033][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.485678][ T570] device veth0_vlan entered promiscuous mode [ 45.509553][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.520461][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.533424][ T570] device veth1_macvtap entered promiscuous mode [ 45.541370][ T307] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 45.558359][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.570998][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.591411][ T551] loop4: detected capacity change from 0 to 512 [ 45.600128][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.614849][ T593] FAT-fs (loop0): Directory bread(block 64) failed [ 45.624191][ T593] FAT-fs (loop0): Directory bread(block 65) failed [ 45.634078][ T551] process 'syz.4.58' launched './file0' with NULL argv: empty string added [ 45.648925][ T593] FAT-fs (loop0): Directory bread(block 66) failed [ 45.662163][ T551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.673238][ T593] FAT-fs (loop0): Directory bread(block 67) failed [ 45.686906][ T551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.691205][ T593] FAT-fs (loop0): Directory bread(block 68) failed [ 45.711254][ T593] FAT-fs (loop0): Directory bread(block 69) failed [ 45.721097][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 45.726760][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.737982][ T593] FAT-fs (loop0): Directory bread(block 70) failed [ 45.748710][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.757503][ T39] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 45.772521][ T593] FAT-fs (loop0): Directory bread(block 71) failed [ 45.781682][ T307] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.798217][ T593] FAT-fs (loop0): Directory bread(block 72) failed [ 45.815816][ T39] usb 5-1: USB disconnect, device number 3 [ 45.829226][ T307] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 45.845635][ T307] usb 2-1: config 0 interface 0 has no altsetting 0 [ 45.848819][ T593] FAT-fs (loop0): Directory bread(block 73) failed [ 45.853523][ T307] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 45.886567][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.906133][ T307] usb 2-1: config 0 descriptor?? [ 45.932404][ T597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.942550][ T597] EXT4-fs (loop5): Test dummy encryption mode enabled [ 45.953595][ T597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=842c1a8, mo2=0003] [ 45.972261][ T597] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 46.727105][ T560] bridge0: port 3(syz_tun) entered blocking state [ 47.189346][ T605] set_capacity_and_notify: 2 callbacks suppressed [ 47.189366][ T605] loop4: detected capacity change from 0 to 256 [ 47.233334][ T560] bridge0: port 3(syz_tun) entered disabled state [ 47.242011][ T605] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 47.256507][ T608] loop0: detected capacity change from 0 to 1024 [ 47.270111][ T570] EXT4-fs (loop5): unmounting filesystem. [ 47.274133][ T608] EXT4-fs: Ignoring removed bh option [ 47.299037][ T560] device syz_tun entered promiscuous mode [ 47.306266][ T560] bridge0: port 3(syz_tun) entered blocking state [ 47.313698][ T560] bridge0: port 3(syz_tun) entered forwarding state [ 47.351382][ T608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.351456][ T612] loop5: detected capacity change from 0 to 16 [ 47.377302][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 47.377319][ T28] audit: type=1400 audit(1792812117.756:226): avc: denied { setattr } for pid=606 comm="syz.0.72" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.385535][ T605] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 47.420612][ T307] usbhid 2-1:0.0: can't add hid device: -71 [ 47.435725][ T608] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.72: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 47.458732][ T608] EXT4-fs (loop0): Remounting filesystem read-only [ 47.458949][ T307] usbhid: probe of 2-1:0.0 failed with error -71 [ 47.475433][ T28] audit: type=1400 audit(1792812117.766:227): avc: denied { write } for pid=604 comm="syz.4.71" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.482649][ T612] erofs: (device loop5): mounted with root inode @ nid 36. [ 47.514245][ T28] audit: type=1400 audit(1792812117.766:228): avc: denied { add_name } for pid=604 comm="syz.4.71" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.531130][ T307] usb 2-1: USB disconnect, device number 2 [ 47.553133][ T605] exFAT-fs (loop4): Filesystem has been set read-only [ 47.605787][ T620] loop4: detected capacity change from 0 to 512 [ 47.617025][ T10] bridge0: port 3(syz_tun) entered disabled state [ 47.628226][ T626] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.72: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 47.654284][ T28] audit: type=1400 audit(1792812117.766:229): avc: denied { associate } for pid=604 comm="syz.4.71" name="cpuacct.usage_sys" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 47.696090][ T620] EXT4-fs: Ignoring removed oldalloc option [ 47.713134][ T620] ext4: Unknown parameter 'measure' [ 47.724105][ T28] audit: type=1400 audit(1792812117.826:230): avc: denied { read } for pid=606 comm="syz.0.72" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.751595][ T626] EXT4-fs (loop0): Remounting filesystem read-only [ 47.765206][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 47.779785][ T28] audit: type=1400 audit(1792812117.826:231): avc: denied { write } for pid=606 comm="syz.0.72" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.841850][ T620] loop4: detected capacity change from 0 to 1024 [ 47.859744][ T620] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 47.861709][ T28] audit: type=1400 audit(1792812117.826:232): avc: denied { setattr } for pid=606 comm="syz.0.72" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.904049][ T28] audit: type=1400 audit(1792812117.826:233): avc: denied { open } for pid=606 comm="syz.0.72" path=2F202864656C6574656429 dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.910133][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 47.940499][ T28] audit: type=1400 audit(1792812117.826:234): avc: denied { open } for pid=606 comm="syz.0.72" path="/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.984117][ T28] audit: type=1400 audit(1792812117.826:235): avc: denied { link } for pid=606 comm="syz.0.72" name="#20" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.046728][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 48.073013][ T620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.077818][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.099397][ T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 48.152859][ T634] syz.5.77 (634) used greatest stack depth: 21024 bytes left [ 48.173906][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.190759][ T637] FAULT_INJECTION: forcing a failure. [ 48.190759][ T637] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 48.192897][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 48.208159][ T637] CPU: 1 PID: 637 Comm: syz.5.78 Not tainted syzkaller #0 [ 48.208185][ T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.208214][ T637] Call Trace: [ 48.208220][ T637] [ 48.208227][ T637] __dump_stack+0x21/0x24 [ 48.208261][ T637] dump_stack_lvl+0x110/0x170 [ 48.255562][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 48.256981][ T637] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.257005][ T637] dump_stack+0x15/0x24 [ 48.280342][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.316302][ T637] should_fail_ex+0x3bf/0x510 [ 48.316336][ T637] should_fail_alloc_page+0x61/0x90 [ 48.316384][ T637] prepare_alloc_pages+0x131/0x570 [ 48.360775][ T637] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 48.369546][ T637] __alloc_pages+0x15b/0x610 [ 48.376891][ T637] ? __cfi___alloc_pages+0x10/0x10 [ 48.385379][ T637] ? try_charge_memcg+0x258/0x1650 [ 48.389073][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 48.392260][ T637] ? memcg_rstat_updated+0x56/0x110 [ 48.392293][ T637] ? __this_cpu_preempt_check+0x13/0x20 [ 48.392319][ T637] __folio_alloc+0x12/0x40 [ 48.392343][ T637] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 48.392366][ T637] ? shmem_replace_folio+0x660/0x660 [ 48.392389][ T637] ? xas_start+0x31d/0x3e0 [ 48.392405][ T637] ? xas_load+0x3a2/0x3c0 [ 48.392421][ T637] ? __filemap_get_folio+0x848/0xa70 [ 48.392440][ T637] ? __cfi___filemap_get_folio+0x10/0x10 [ 48.392461][ T637] shmem_get_folio_gfp+0xd6d/0x20f0 [ 48.459542][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.460129][ T637] ? xas_find+0x6ec/0x820 [ 48.473913][ T289] EXT4-fs error (device loop0): empty_inline_dir:1903: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 48.476583][ T637] shmem_fault+0x1ab/0x670 [ 48.476619][ T637] ? __cfi_shmem_fault+0x10/0x10 [ 48.476642][ T637] ? __kasan_check_write+0x14/0x20 [ 48.503925][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.505498][ T637] ? vma_data_pages+0xfc/0x130 [ 48.505536][ T637] do_fault+0x19de/0x1e30 [ 48.543374][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 48.543671][ T637] ? pte_marker_clear+0x220/0x220 [ 48.550708][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 48.557755][ T637] ? check_preemption_disabled+0x71/0x120 [ 48.557790][ T637] ? memcg_rstat_updated+0x56/0x110 [ 48.557808][ T637] handle_mm_fault+0x1363/0x26b0 [ 48.565930][ T289] EXT4-fs (loop0): Remounting filesystem read-only [ 48.570381][ T637] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.570416][ T637] __get_user_pages+0x34b/0xdb0 [ 48.570436][ T637] ? populate_vma_page_range+0x120/0x120 [ 48.570452][ T637] ? do_mmap+0x8bd/0xdd0 [ 48.570471][ T637] ? userfaultfd_unmap_complete+0x28f/0x310 [ 48.570491][ T637] __mm_populate+0x2ea/0x430 [ 48.595251][ T289] EXT4-fs error (device loop0): ext4_read_inline_dir:1619: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 48.624496][ T637] ? __cfi___mm_populate+0x10/0x10 [ 48.624531][ T637] vm_mmap_pgoff+0x271/0x3f0 [ 48.624554][ T637] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 48.624576][ T637] ? __x64_sys_futex+0x100/0x100 [ 48.632034][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 48.639661][ T637] ksys_mmap_pgoff+0xf6/0x1d0 [ 48.639703][ T637] ? __kasan_check_write+0x14/0x20 [ 48.639721][ T637] __x64_sys_mmap+0xfa/0x110 [ 48.639738][ T637] x64_sys_call+0x8fd/0x9a0 [ 48.639756][ T637] do_syscall_64+0x4c/0xa0 [ 48.639770][ T637] ? clear_bhb_loop+0x30/0x80 [ 48.639788][ T637] ? clear_bhb_loop+0x30/0x80 [ 48.639808][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 48.639827][ T637] RIP: 0033:0x7f7b1199f559 [ 48.639859][ T637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.639873][ T637] RSP: 002b:00007f7b1291b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 48.639891][ T637] RAX: ffffffffffffffda RBX: 00007f7b11c25fa0 RCX: 00007f7b1199f559 [ 48.647519][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 48.652893][ T637] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 48.661184][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 48.667775][ T637] RBP: 00007f7b11a36b20 R08: ffffffffffffffff R09: 0000000028f43000 [ 48.667795][ T637] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 48.667805][ T637] R13: 00007f7b11c26038 R14: 00007f7b11c25fa0 R15: 00007ffff8af27b8 [ 48.667820][ T637] [ 48.960503][ T291] EXT4-fs (loop4): unmounting filesystem. [ 49.014954][ T658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.068193][ T658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 49.151537][ T669] loop2: detected capacity change from 0 to 256 [ 49.161616][ T669] exfat: Deprecated parameter 'utf8' [ 49.168507][ T669] exfat: Deprecated parameter 'utf8' [ 49.177360][ T669] exfat: Deprecated parameter 'namecase' [ 49.186586][ T669] exfat: Deprecated parameter 'namecase' [ 49.194423][ T669] exfat: Deprecated parameter 'namecase' [ 49.208394][ T669] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1122e3dc) [ 49.223431][ T669] exFAT-fs (loop2): invalid boot region [ 49.231254][ T669] exFAT-fs (loop2): failed to recognize exfat type [ 49.257148][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 49.276961][ T322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 49.298791][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 49.337544][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 49.387353][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 49.401014][ T692] loop5: detected capacity change from 0 to 128 [ 49.439873][ T692] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.453287][ T289] EXT4-fs warning (device loop0): empty_inline_dir:1910: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 49.477267][ T692] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.533826][ T570] EXT4-fs (loop5): unmounting filesystem. [ 49.562370][ T704] loop1: detected capacity change from 0 to 512 [ 49.952218][ T736] SELinux: Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped). [ 49.999699][ T733] loop2: detected capacity change from 0 to 512 [ 50.212972][ T10] device bridge_slave_1 left promiscuous mode [ 50.225595][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.245391][ T10] device bridge_slave_0 left promiscuous mode [ 50.265060][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.300333][ T10] device veth1_macvtap left promiscuous mode [ 50.339475][ T10] device veth0_vlan left promiscuous mode [ 50.528764][ T770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=770 comm=syz.5.95 [ 50.595702][ T743] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.636368][ T777] loop4: detected capacity change from 0 to 512 [ 50.647049][ T743] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.674645][ T777] EXT4-fs: Ignoring removed oldalloc option [ 50.688968][ T743] device bridge_slave_0 entered promiscuous mode [ 50.689548][ T777] ext4: Unknown parameter 'measure' [ 50.724563][ T743] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.735592][ T743] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.768544][ T777] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 50.782423][ T743] device bridge_slave_1 entered promiscuous mode [ 50.858644][ T777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.024864][ T777] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.97: corrupted in-inode xattr [ 51.065978][ T291] EXT4-fs (loop4): unmounting filesystem. [ 51.079015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.101646][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.124763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.149537][ T733] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.173247][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.192512][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.201130][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.227324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.245841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.268980][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.277126][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.307730][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.327831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.347845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.387196][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.421873][ T743] device veth0_vlan entered promiscuous mode [ 51.441585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.462992][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.482657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.504417][ T743] device veth1_macvtap entered promiscuous mode [ 51.527273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.549266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.566258][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.826697][ T322] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.904408][ T801] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.919078][ T801] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.926831][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 51.952568][ T291] EXT4-fs (loop4): unmounting filesystem. [ 51.987745][ T851] exfat: Deprecated parameter 'utf8' [ 52.000621][ T851] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 52.026523][ T852] Core dump to core aborted: cannot preserve file permissions [ 52.106716][ T307] usb 3-1: device descriptor read/64, error -71 [ 52.238644][ T862] set_capacity_and_notify: 5 callbacks suppressed [ 52.238658][ T862] loop4: detected capacity change from 0 to 512 [ 52.254647][ T862] EXT4-fs: Ignoring removed oldalloc option [ 52.262438][ T862] ext4: Unknown parameter 'measure' [ 52.285761][ T862] loop4: detected capacity change from 0 to 1024 [ 52.299108][ T862] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 52.337553][ T862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 52.376733][ T307] usb 3-1: device descriptor read/64, error -71 [ 52.413872][ T862] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.107: corrupted in-inode xattr [ 52.435619][ T291] EXT4-fs (loop4): unmounting filesystem. [ 52.453670][ T866] loop4: detected capacity change from 0 to 256 [ 52.490308][ T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 52.515596][ T868] FAULT_INJECTION: forcing a failure. [ 52.515596][ T868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 52.533478][ T868] CPU: 1 PID: 868 Comm: syz.6.109 Not tainted syzkaller #0 [ 52.541448][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 52.552912][ T868] Call Trace: [ 52.556993][ T868] [ 52.561901][ T868] __dump_stack+0x21/0x24 [ 52.566962][ T868] dump_stack_lvl+0x110/0x170 [ 52.573752][ T868] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.582575][ T868] dump_stack+0x15/0x24 [ 52.586756][ T868] should_fail_ex+0x3bf/0x510 [ 52.592774][ T868] should_fail_alloc_page+0x61/0x90 [ 52.598660][ T868] prepare_alloc_pages+0x131/0x570 [ 52.605473][ T868] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 52.611548][ T868] __alloc_pages+0x15b/0x610 [ 52.616893][ T868] ? __cfi___alloc_pages+0x10/0x10 [ 52.622502][ T868] ? try_charge_memcg+0x258/0x1650 [ 52.628792][ T868] ? memcg_rstat_updated+0x56/0x110 [ 52.635860][ T868] ? __this_cpu_preempt_check+0x13/0x20 [ 52.642323][ T868] __folio_alloc+0x12/0x40 [ 52.647215][ T868] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 52.655642][ T868] ? shmem_replace_folio+0x660/0x660 [ 52.662127][ T868] ? xas_start+0x31d/0x3e0 [ 52.667852][ T866] loop4: detected capacity change from 0 to 40427 [ 52.669234][ T868] ? xas_load+0x3a2/0x3c0 [ 52.669267][ T868] ? __filemap_get_folio+0x848/0xa70 [ 52.687460][ T866] F2FS-fs (loop4): invalid crc value [ 52.688606][ T868] ? __cfi___filemap_get_folio+0x10/0x10 [ 52.702180][ T868] shmem_get_folio_gfp+0xd6d/0x20f0 [ 52.711090][ T868] ? xas_find+0x6ec/0x820 [ 52.715629][ T868] shmem_fault+0x1ab/0x670 [ 52.719905][ T866] F2FS-fs (loop4): Found nat_bits in checkpoint [ 52.720841][ T868] ? __cfi_shmem_fault+0x10/0x10 [ 52.736378][ T868] ? __kasan_check_write+0x14/0x20 [ 52.741894][ T868] ? vma_data_pages+0xfc/0x130 [ 52.749448][ T868] do_fault+0x19de/0x1e30 [ 52.754937][ T868] ? pte_marker_clear+0x220/0x220 [ 52.762824][ T866] F2FS-fs (loop4): Start checkpoint disabled! [ 52.763001][ T868] ? check_preemption_disabled+0x71/0x120 [ 52.770607][ T866] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 52.777572][ T868] ? memcg_rstat_updated+0x56/0x110 [ 52.777604][ T868] handle_mm_fault+0x1363/0x26b0 [ 52.777639][ T868] ? __cfi_handle_mm_fault+0x10/0x10 [ 52.777659][ T868] __get_user_pages+0x34b/0xdb0 [ 52.789691][ T866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 52.795947][ T868] ? populate_vma_page_range+0x120/0x120 [ 52.804298][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 52.804310][ T28] audit: type=1400 audit(1792812123.176:272): avc: denied { create } for pid=865 comm="syz.4.108" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.809495][ T868] ? do_mmap+0x8bd/0xdd0 [ 52.809530][ T868] ? userfaultfd_unmap_complete+0x28f/0x310 [ 52.809549][ T868] __mm_populate+0x2ea/0x430 [ 52.809567][ T868] ? __cfi___mm_populate+0x10/0x10 [ 52.809585][ T868] vm_mmap_pgoff+0x271/0x3f0 [ 52.809601][ T868] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 52.816288][ T28] audit: type=1400 audit(1792812123.176:273): avc: denied { append open } for pid=865 comm="syz.4.108" path="/26/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.824481][ T868] ? xfd_validate_state+0x70/0x150 [ 52.824850][ T868] ksys_mmap_pgoff+0xf6/0x1d0 [ 52.824873][ T868] ? __kasan_check_write+0x14/0x20 [ 52.824889][ T868] __x64_sys_mmap+0xfa/0x110 [ 52.824908][ T868] x64_sys_call+0x8fd/0x9a0 [ 52.834927][ T28] audit: type=1400 audit(1792812123.176:274): avc: denied { ioctl } for pid=865 comm="syz.4.108" path="/26/file0/file0" dev="loop4" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.841286][ T868] do_syscall_64+0x4c/0xa0 [ 52.841315][ T868] ? clear_bhb_loop+0x30/0x80 [ 52.841335][ T868] ? clear_bhb_loop+0x30/0x80 [ 52.841353][ T868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.841371][ T868] RIP: 0033:0x7f8b8679f559 [ 52.841387][ T868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.841404][ T868] RSP: 002b:00007f8b876c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 52.841423][ T868] RAX: ffffffffffffffda RBX: 00007f8b86a25fa0 RCX: 00007f8b8679f559 [ 52.841435][ T868] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 52.841583][ T868] RBP: 00007f8b86836b20 R08: ffffffffffffffff R09: 0000000028f43000 [ 52.841595][ T868] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 52.841605][ T868] R13: 00007f8b86a26038 R14: 00007f8b86a25fa0 R15: 00007ffdb97deb28 [ 52.841620][ T868] [ 52.966733][ T307] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 52.991367][ T28] audit: type=1400 audit(1792812123.176:275): avc: denied { read } for pid=865 comm="syz.4.108" path="/26/file0/blkio.bfq.group_wait_time" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.094585][ T874] loop1: detected capacity change from 0 to 256 [ 53.161818][ T307] usb 3-1: device descriptor read/64, error -71 [ 53.205111][ T874] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.221103][ T874] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 53.261815][ T874] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 53.320107][ T876] kworker/u4:8: attempt to access beyond end of device [ 53.320107][ T876] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 53.342760][ T28] audit: type=1400 audit(1792812123.726:276): avc: denied { watch watch_reads } for pid=877 comm="syz.5.112" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 53.377830][ T876] kworker/u4:8: attempt to access beyond end of device [ 53.377830][ T876] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 53.436693][ T307] usb 3-1: device descriptor read/64, error -71 [ 53.533420][ T884] loop4: detected capacity change from 0 to 514 [ 53.544661][ T28] audit: type=1400 audit(1792812123.926:277): avc: denied { remount } for pid=883 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.567542][ T307] usb usb3-port1: attempt power cycle [ 53.608150][ T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.637705][ T28] audit: type=1400 audit(1792812124.026:278): avc: denied { write } for pid=891 comm="syz.4.114" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.701463][ T28] audit: type=1400 audit(1792812124.086:279): avc: denied { setattr } for pid=891 comm="syz.4.114" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 53.733420][ T895] loop4: detected capacity change from 0 to 256 [ 53.750644][ T895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 53.765147][ T895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 53.791293][ T28] audit: type=1400 audit(1792812124.176:280): avc: denied { setopt } for pid=896 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.817595][ T28] audit: type=1400 audit(1792812124.206:281): avc: denied { shutdown } for pid=896 comm="syz.4.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.846747][ T591] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.872468][ T898] loop4: detected capacity change from 0 to 2048 [ 53.921331][ T898] loop4: p2 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 53.929021][ T900] loop1: detected capacity change from 0 to 256 [ 54.037727][ T307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 54.066755][ T591] usb 7-1: Using ep0 maxpacket: 32 [ 54.076997][ T307] usb 3-1: device descriptor read/8, error -71 [ 54.095595][ T591] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 54.106407][ T902] loop1: detected capacity change from 0 to 512 [ 54.117786][ T591] usb 7-1: config 0 has no interface number 0 [ 54.122676][ T902] EXT4-fs: Ignoring removed oldalloc option [ 54.137365][ T902] ext4: Unknown parameter 'measure' [ 54.150163][ T591] usb 7-1: config 0 interface 184 has no altsetting 0 [ 54.165089][ T902] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 54.215188][ T902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.227721][ T307] usb 3-1: device descriptor read/8, error -71 [ 54.237290][ T591] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 54.272383][ T591] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.282614][ T591] usb 7-1: Product: syz [ 54.287960][ T591] usb 7-1: Manufacturer: syz [ 54.295919][ T591] usb 7-1: SerialNumber: syz [ 54.304097][ T591] usb 7-1: config 0 descriptor?? [ 54.315998][ T591] smsc75xx v1.0.0 [ 54.397214][ T914] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 54.408318][ T914] overlayfs: missing 'lowerdir' [ 54.496714][ T307] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 54.605429][ T915] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.118: corrupted in-inode xattr [ 54.734989][ T591] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 54.753178][ T307] usb 3-1: device descriptor read/8, error -71 [ 54.777563][ T591] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 54.786045][ T591] usb 7-1: USB disconnect, device number 2 [ 54.917185][ T307] usb 3-1: device descriptor read/8, error -71 [ 54.926726][ T308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.944266][ T287] EXT4-fs (loop1): unmounting filesystem. [ 55.027585][ T924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.037572][ T924] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.073724][ T307] usb usb3-port1: unable to enumerate USB device [ 55.152825][ T308] usb 5-1: device descriptor read/64, error -71 [ 55.227599][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.125'. [ 55.241378][ T941] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.257982][ T941] device bridge_slave_0 left promiscuous mode [ 55.265522][ T941] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.291179][ T944] netlink: 32 bytes leftover after parsing attributes in process `syz.5.124'. [ 55.476792][ T308] usb 5-1: device descriptor read/64, error -71 [ 55.633629][ T941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.125'. [ 55.648869][ T941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.125'. [ 55.690418][ T290] EXT4-fs (loop2): unmounting filesystem. [ 55.886728][ T308] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 56.056708][ T308] usb 5-1: device descriptor read/64, error -71 [ 56.120546][ T953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 56.146112][ T953] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.321631][ T970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 56.331965][ T970] overlayfs: missing 'lowerdir' [ 56.349630][ T308] usb 5-1: device descriptor read/64, error -71 [ 56.411192][ T955] fs-verity: sha256 using implementation "sha256-avx2" [ 56.451083][ T965] EXT4-fs: Ignoring removed oldalloc option [ 56.511127][ T308] usb usb5-port1: attempt power cycle [ 56.549540][ T965] ext4: Unknown parameter 'measure' [ 56.633824][ T965] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 56.745615][ T965] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 56.761956][ T287] EXT4-fs (loop1): unmounting filesystem. [ 56.886409][ T992] EXT4-fs error (device loop6): ext4_iget_extra_inode:4765: inode #15: comm syz.6.132: corrupted in-inode xattr [ 56.906496][ T984] overlayfs: './file0' not a directory [ 57.022242][ T743] EXT4-fs (loop6): unmounting filesystem. [ 57.075332][ T987] EXT4-fs: Ignoring removed bh option [ 57.095128][ T987] incfs_lookup_dentry err:-13 [ 57.114599][ T1005] netlink: 28 bytes leftover after parsing attributes in process `syz.6.141'. [ 57.117400][ T987] incfs: Can't find or create .index dir in ./file0 [ 57.134796][ T1003] syz.5.143 (1003): attempted to duplicate a private mapping with mremap. This is not supported. [ 57.181456][ T987] incfs: mount failed -13 [ 57.250548][ T1013] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=1013 comm=syz.4.147 [ 57.285891][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4p223, 10) failed: No such file or directory [ 57.318695][ T910] udevd[910]: inotify_add_watch(7, /dev/loop4p224, 10) failed: No such file or directory [ 57.333868][ T911] udevd[911]: inotify_add_watch(7, /dev/loop4p225, 10) failed: No such file or directory [ 57.350366][ T916] udevd[916]: inotify_add_watch(7, /dev/loop4p226, 10) failed: No such file or directory [ 57.373773][ T917] udevd[917]: inotify_add_watch(7, /dev/loop4p227, 10) failed: No such file or directory [ 57.390823][ T322] udevd[322]: inotify_add_watch(7, /dev/loop4p228, 10) failed: No such file or directory [ 57.403209][ T361] udevd[361]: inotify_add_watch(7, /dev/loop4p231, 10) failed: No such file or directory [ 57.403210][ T360] udevd[360]: inotify_add_watch(7, /dev/loop4p229, 10) failed: No such file or directory [ 57.404618][ T919] udevd[919]: inotify_add_watch(7, /dev/loop4p230, 10) failed: No such file or directory [ 57.415653][ T920] udevd[920]: inotify_add_watch(7, /dev/loop4p232, 10) failed: No such file or directory [ 57.470666][ T1018] set_capacity_and_notify: 10 callbacks suppressed [ 57.470685][ T1018] loop4: detected capacity change from 0 to 512 [ 57.673004][ T1010] syz.5.143 (1010) used greatest stack depth: 20648 bytes left [ 57.809189][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 57.809206][ T28] audit: type=1400 audit(1792812128.196:296): avc: denied { append } for pid=1047 comm="syz.2.152" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 57.881088][ T1052] loop5: detected capacity change from 0 to 512 [ 57.910726][ T1052] EXT4-fs: Ignoring removed oldalloc option [ 57.933884][ T1052] ext4: Unknown parameter 'measure' [ 57.983709][ T1052] loop5: detected capacity change from 0 to 1024 [ 58.020279][ T1052] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 58.042571][ T1062] loop2: detected capacity change from 0 to 256 [ 58.156235][ T1062] FAT-fs (loop2): Directory bread(block 64) failed [ 58.167291][ T28] audit: type=1400 audit(1792812128.236:297): avc: denied { write } for pid=1047 comm="syz.2.152" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 58.232323][ T1062] FAT-fs (loop2): Directory bread(block 65) failed [ 58.267728][ T28] audit: type=1400 audit(1792812128.656:298): avc: denied { write } for pid=1075 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.288535][ T1062] FAT-fs (loop2): Directory bread(block 66) failed [ 58.335370][ T28] audit: type=1400 audit(1792812128.686:299): avc: denied { setopt } for pid=1075 comm="syz.4.156" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.352856][ T1052] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 58.394617][ T1062] FAT-fs (loop2): Directory bread(block 67) failed [ 58.424292][ T1062] FAT-fs (loop2): Directory bread(block 68) failed [ 58.458298][ T28] audit: type=1326 audit(1792812128.836:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1075 comm="syz.4.156" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefb5b9f559 code=0x0 [ 58.461787][ T1062] FAT-fs (loop2): Directory bread(block 69) failed [ 58.500616][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 58.567743][ T1077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=1077 comm=syz.4.156 [ 58.594022][ T1078] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.151: corrupted in-inode xattr [ 58.624227][ T1077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1002 sclass=netlink_tcpdiag_socket pid=1077 comm=syz.4.156 [ 58.631247][ T1062] FAT-fs (loop2): Directory bread(block 70) failed [ 58.656366][ T1062] FAT-fs (loop2): Directory bread(block 71) failed [ 58.666074][ T1062] FAT-fs (loop2): Directory bread(block 72) failed [ 58.675787][ T1062] FAT-fs (loop2): Directory bread(block 73) failed [ 58.717138][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 58.738695][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 58.757506][ T570] EXT4-fs (loop5): unmounting filesystem. [ 58.768028][ T24] usb 2-1: New USB device strings: Mfr=82, Product=178, SerialNumber=3 [ 58.768054][ T24] usb 2-1: Product: syz [ 58.768067][ T24] usb 2-1: Manufacturer: syz [ 58.768079][ T24] usb 2-1: SerialNumber: syz [ 58.786737][ T24] usb 2-1: config 0 descriptor?? [ 59.014481][ T1093] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 59.026323][ T1093] overlayfs: missing 'lowerdir' [ 59.233700][ T1070] loop1: detected capacity change from 0 to 512 [ 59.285080][ T1070] EXT4-fs (loop1): orphan cleanup on readonly fs [ 59.301771][ T1070] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 59.325368][ T1042] loop6: detected capacity change from 0 to 131072 [ 59.336753][ T1070] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 59.354217][ T1070] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.155: Failed to acquire dquot type 1 [ 59.377070][ T1070] EXT4-fs (loop1): 1 truncate cleaned up [ 59.386337][ T1070] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.387182][ T1042] F2FS-fs (loop6): Found nat_bits in checkpoint [ 59.411258][ T1070] EXT4-fs (loop1): unmounting filesystem. [ 59.475932][ T1042] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 59.515963][ T28] audit: type=1400 audit(1792812129.896:301): avc: denied { write } for pid=1041 comm="syz.6.150" path=2F202864656C6574656429 dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.563225][ T28] audit: type=1400 audit(1792812129.896:302): avc: denied { rename } for pid=1041 comm="syz.6.150" name="#d" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.591041][ T28] audit: type=1400 audit(1792812129.906:303): avc: denied { unlink } for pid=1041 comm="syz.6.150" name="#e" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.816744][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.918377][ T1106] loop2: detected capacity change from 0 to 256 [ 59.926581][ T1106] exfat: Unknown parameter '' [ 60.008314][ T60] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.022373][ T60] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 60.038951][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 60.049901][ T60] usb 7-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 60.065463][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.075606][ T60] usb 7-1: config 0 descriptor?? [ 60.325978][ T1113] loop4: detected capacity change from 0 to 1024 [ 60.352639][ T1113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 60.363473][ T1113] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.385520][ T1113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.398862][ T1113] netlink: 40 bytes leftover after parsing attributes in process `syz.4.166'. [ 60.526444][ T1042] bridge0: port 1(syz_tun) entered blocking state [ 60.555328][ T1042] bridge0: port 1(syz_tun) entered disabled state [ 60.566715][ T1042] device syz_tun entered promiscuous mode [ 60.576472][ T1042] bridge0: port 1(syz_tun) entered blocking state [ 60.584285][ T1042] bridge0: port 1(syz_tun) entered forwarding state [ 60.601316][ T60] usbhid 7-1:0.0: can't add hid device: -71 [ 60.619526][ T60] usbhid: probe of 7-1:0.0 failed with error -71 [ 60.630641][ T60] usb 7-1: USB disconnect, device number 3 [ 60.636152][ T1113] x_tables: unsorted entry at hook 1 [ 60.701364][ T291] EXT4-fs (loop4): unmounting filesystem. [ 60.712200][ T1120] loop2: detected capacity change from 0 to 256 [ 60.907828][ T1126] loop4: detected capacity change from 0 to 40427 [ 60.918754][ T1126] F2FS-fs (loop4): invalid crc value [ 60.928074][ T1126] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.978039][ T1126] F2FS-fs (loop4): Start checkpoint disabled! [ 60.986179][ T1126] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 60.997288][ T1126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 61.089658][ T24] usb-storage 2-1:0.0: USB Mass Storage device detected [ 61.106399][ T24] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 61.118005][ T24] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P af) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 61.118005][ T24] Please send a copy of this message to and [ 61.118882][ T1133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.171'. [ 61.171284][ T1133] netlink: 43 bytes leftover after parsing attributes in process `syz.1.171'. [ 61.188083][ T1133] netlink: 'syz.1.171': attribute type 6 has an invalid length. [ 61.197810][ T1133] netlink: 43 bytes leftover after parsing attributes in process `syz.1.171'. [ 61.217422][ T24] usb 2-1: USB disconnect, device number 3 [ 61.473055][ T1145] netlink: 20 bytes leftover after parsing attributes in process `syz.6.172'. [ 61.482878][ T1145] IPv6: Can't replace route, no match found [ 61.536929][ T406] bridge0: port 1(syz_tun) entered disabled state [ 61.726889][ T1156] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 61.745022][ T406] kworker/u4:6: attempt to access beyond end of device [ 61.745022][ T406] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.765500][ T1156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=1156 comm=syz.2.179 [ 61.840078][ T1158] FAULT_INJECTION: forcing a failure. [ 61.840078][ T1158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 61.924341][ T1158] CPU: 1 PID: 1158 Comm: syz.2.181 Not tainted syzkaller #0 [ 61.940517][ T1158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 61.954824][ T1158] Call Trace: [ 61.958645][ T1158] [ 61.965824][ T1158] __dump_stack+0x21/0x24 [ 61.972697][ T1158] dump_stack_lvl+0x110/0x170 [ 61.978449][ T1158] ? __cfi_dump_stack_lvl+0x8/0x8 [ 61.992450][ T1158] dump_stack+0x15/0x24 [ 61.999206][ T1158] should_fail_ex+0x3bf/0x510 [ 62.005970][ T1158] should_fail_alloc_page+0x61/0x90 [ 62.012337][ T1158] prepare_alloc_pages+0x131/0x570 [ 62.018955][ T1158] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 62.027839][ T1158] __alloc_pages+0x15b/0x610 [ 62.033278][ T1158] ? __cfi___alloc_pages+0x10/0x10 [ 62.040077][ T1158] ? try_charge_memcg+0x258/0x1650 [ 62.047996][ T1158] ? memcg_rstat_updated+0x56/0x110 [ 62.054547][ T1158] ? __this_cpu_preempt_check+0x13/0x20 [ 62.063993][ T1158] __folio_alloc+0x12/0x40 [ 62.069045][ T1158] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 62.075407][ T1158] ? shmem_replace_folio+0x660/0x660 [ 62.081859][ T1158] ? xas_start+0x31d/0x3e0 [ 62.087434][ T1158] ? xas_load+0x3a2/0x3c0 [ 62.090495][ T1171] overlayfs: unrecognized mount option "\" or missing value [ 62.093203][ T1158] ? __filemap_get_folio+0x848/0xa70 [ 62.093239][ T1158] ? __cfi___filemap_get_folio+0x10/0x10 [ 62.114906][ T1158] shmem_get_folio_gfp+0xd6d/0x20f0 [ 62.120857][ T1158] ? xas_find+0x6ec/0x820 [ 62.125348][ T1158] shmem_fault+0x1ab/0x670 [ 62.131076][ T1158] ? __cfi_shmem_fault+0x10/0x10 [ 62.137483][ T1158] ? __kasan_check_write+0x14/0x20 [ 62.144164][ T1158] ? vma_data_pages+0xfc/0x130 [ 62.152256][ T1158] do_fault+0x19de/0x1e30 [ 62.156844][ T1158] ? pte_marker_clear+0x220/0x220 [ 62.162691][ T1158] ? check_preemption_disabled+0x71/0x120 [ 62.172594][ T1158] ? memcg_rstat_updated+0x56/0x110 [ 62.177801][ T1158] handle_mm_fault+0x1363/0x26b0 [ 62.186900][ T1158] ? __cfi_handle_mm_fault+0x10/0x10 [ 62.195203][ T1158] __get_user_pages+0x34b/0xdb0 [ 62.200880][ T1158] ? populate_vma_page_range+0x120/0x120 [ 62.210246][ T1158] ? do_mmap+0x8bd/0xdd0 [ 62.216823][ T1158] ? userfaultfd_unmap_complete+0x28f/0x310 [ 62.227856][ T1158] __mm_populate+0x2ea/0x430 [ 62.234227][ T1158] ? __cfi___mm_populate+0x10/0x10 [ 62.244253][ T1158] vm_mmap_pgoff+0x271/0x3f0 [ 62.250448][ T1158] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 62.256204][ T1158] ? xfd_validate_state+0x70/0x150 [ 62.262160][ T1158] ksys_mmap_pgoff+0xf6/0x1d0 [ 62.266941][ T1158] ? __kasan_check_write+0x14/0x20 [ 62.272705][ T1158] __x64_sys_mmap+0xfa/0x110 [ 62.278490][ T1158] x64_sys_call+0x8fd/0x9a0 [ 62.285616][ T1158] do_syscall_64+0x4c/0xa0 [ 62.292087][ T1158] ? clear_bhb_loop+0x30/0x80 [ 62.300128][ T1158] ? clear_bhb_loop+0x30/0x80 [ 62.305968][ T1158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.314365][ T1158] RIP: 0033:0x7fbfeb59f559 [ 62.320659][ T1158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.345876][ T1158] RSP: 002b:00007fbfec4ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 62.358784][ T1158] RAX: ffffffffffffffda RBX: 00007fbfeb825fa0 RCX: 00007fbfeb59f559 [ 62.370268][ T1158] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 62.380747][ T1158] RBP: 00007fbfeb636b20 R08: ffffffffffffffff R09: 0000000028f43000 [ 62.390531][ T1158] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 62.400444][ T1158] R13: 00007fbfeb826038 R14: 00007fbfeb825fa0 R15: 00007ffdbe392ff8 [ 62.409197][ T1158] [ 62.534182][ T1179] xt_hashlimit: size too large, truncated to 1048576 [ 62.610519][ T1180] device wireguard0 entered promiscuous mode [ 62.812841][ T1188] ip_tables: iptables: counters copy to user failed while replacing table [ 62.942288][ T1192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 62.953388][ T1192] overlayfs: missing 'lowerdir' [ 63.395044][ T1199] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.397693][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 63.397710][ T28] audit: type=1400 audit(1792812133.786:313): avc: denied { create } for pid=1198 comm="syz.1.191" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 63.542203][ T28] audit: type=1400 audit(1792812133.856:314): avc: denied { associate } for pid=1198 comm="syz.1.191" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 63.685501][ T1200] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 63.693055][ T28] audit: type=1400 audit(1792812133.856:315): avc: denied { mounton } for pid=1198 comm="syz.1.191" path="/37/file1/file0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 63.815685][ T1200] overlayfs: missing 'lowerdir' [ 63.835633][ T28] audit: type=1400 audit(1792812133.996:316): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 63.994709][ T1188] loop6: detected capacity change from 0 to 40427 [ 64.040463][ T1188] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 64.074465][ T1188] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 64.101812][ T1188] F2FS-fs (loop6): invalid crc value [ 64.112339][ T28] audit: type=1400 audit(1792812134.486:317): avc: denied { ioctl } for pid=1203 comm="syz.5.193" path="socket:[19402]" dev="sockfs" ino=19402 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.157322][ T28] audit: type=1400 audit(1792812134.486:318): avc: denied { rmdir } for pid=287 comm="syz-executor" name="bus" dev="tmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 64.157572][ T28] audit: type=1400 audit(1792812134.486:319): avc: denied { ioctl } for pid=1203 comm="syz.5.193" path="socket:[19405]" dev="sockfs" ino=19405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.338060][ T28] audit: type=1400 audit(1792812134.676:320): avc: denied { ioctl } for pid=1203 comm="syz.5.193" path="socket:[19407]" dev="sockfs" ino=19407 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.372153][ T28] audit: type=1400 audit(1792812134.766:321): avc: denied { connect } for pid=1209 comm="syz.5.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.397507][ T1188] F2FS-fs (loop6): Found nat_bits in checkpoint [ 64.426479][ T1204] loop2: detected capacity change from 0 to 40427 [ 64.462053][ T1204] F2FS-fs (loop2): fault_injection options not supported [ 64.513911][ T1204] F2FS-fs (loop2): fault_type options not supported [ 64.514575][ T1188] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 64.549868][ T1204] F2FS-fs (loop2): invalid crc value [ 64.561878][ T1188] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 64.572544][ T1204] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.652773][ T1204] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.725977][ T28] audit: type=1400 audit(1792812135.116:322): avc: denied { ioctl } for pid=1223 comm="syz.4.198" path="socket:[19436]" dev="sockfs" ino=19436 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.746261][ T1227] loop4: detected capacity change from 0 to 512 [ 64.771350][ T1227] EXT4-fs: Ignoring removed oldalloc option [ 64.776901][ T1204] syz.2.192: attempt to access beyond end of device [ 64.776901][ T1204] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.781587][ T1227] ext4: Unknown parameter 'measure' [ 64.814999][ T1230] loop5: detected capacity change from 0 to 256 [ 64.845416][ T1230] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.874177][ T1227] loop4: detected capacity change from 0 to 1024 [ 64.883486][ T1230] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 64.908823][ T1230] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 64.911084][ T1227] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 64.982877][ T1227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.035450][ T1227] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.199: corrupted in-inode xattr [ 65.062033][ T291] EXT4-fs (loop4): unmounting filesystem. [ 65.200008][ T1230] size and base must be multiples of 4 kiB [ 65.210263][ T1230] CPU: 1 PID: 1230 Comm: syz.5.200 Not tainted syzkaller #0 [ 65.222146][ T1230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 65.238424][ T1230] Call Trace: [ 65.242569][ T1230] [ 65.248892][ T1230] __dump_stack+0x21/0x24 [ 65.254454][ T1230] dump_stack_lvl+0x110/0x170 [ 65.259928][ T1230] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.267218][ T1230] ? has_cap_mac_admin+0x370/0x370 [ 65.275610][ T1230] dump_stack+0x15/0x24 [ 65.280328][ T1230] mtrr_del+0x84/0x90 [ 65.285185][ T1230] mtrr_ioctl+0x8e5/0xfb0 [ 65.290059][ T1230] ? __cfi_mtrr_ioctl+0x10/0x10 [ 65.298149][ T1230] ? selinux_file_ioctl+0x3ad/0x4c0 [ 65.304850][ T1230] ? __fget_files+0x2d1/0x330 [ 65.312582][ T1230] ? __cfi_mtrr_ioctl+0x10/0x10 [ 65.313448][ T1245] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 65.320255][ T1230] proc_reg_unlocked_ioctl+0x1e6/0x2d0 [ 65.320298][ T1230] ? __cfi_proc_reg_unlocked_ioctl+0x10/0x10 [ 65.332416][ T1245] overlayfs: missing 'lowerdir' [ 65.340374][ T1230] __se_sys_ioctl+0x12f/0x1b0 [ 65.340413][ T1230] __x64_sys_ioctl+0x7b/0x90 [ 65.340431][ T1230] x64_sys_call+0x58b/0x9a0 [ 65.340451][ T1230] do_syscall_64+0x4c/0xa0 [ 65.340466][ T1230] ? clear_bhb_loop+0x30/0x80 [ 65.396735][ T1230] ? clear_bhb_loop+0x30/0x80 [ 65.402900][ T1230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.413783][ T1230] RIP: 0033:0x7f7b1199f559 [ 65.420158][ T1230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.451924][ T1230] RSP: 002b:00007f7b1291b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.465638][ T1230] RAX: ffffffffffffffda RBX: 00007f7b11c25fa0 RCX: 00007f7b1199f559 [ 65.477155][ T1230] RDX: 0000200000000800 RSI: 00000000400c4d04 RDI: 000000000000000c [ 65.489209][ T1230] RBP: 00007f7b11a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 65.501239][ T1230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.513854][ T1230] R13: 00007f7b11c26038 R14: 00007f7b11c25fa0 R15: 00007ffff8af27b8 [ 65.525817][ T1230] [ 65.915890][ T1252] loop4: detected capacity change from 0 to 512 [ 65.935792][ T1252] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 65.956698][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 65.991650][ T1252] loop4: detected capacity change from 0 to 256 [ 66.007045][ T1252] exfat: Unknown parameter '' [ 66.148501][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.162029][ T6] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.175114][ T1268] overlayfs: unrecognized mount option "/" or missing value [ 66.176071][ T1269] loop5: detected capacity change from 0 to 128 [ 66.190515][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 66.219733][ T1268] loop6: detected capacity change from 0 to 2048 [ 66.236835][ T6] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.236987][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 66.268209][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 66.285560][ T1268] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 66.300629][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.310199][ T6] usb 3-1: Product: syz [ 66.319504][ T6] usb 3-1: Manufacturer: syz [ 66.334527][ T6] usb 3-1: SerialNumber: syz [ 66.348298][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 66.358366][ T6] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 66.358366][ T6] Please send a copy of this message to and [ 66.507760][ T24] usb 2-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 66.522503][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3840, setting to 1024 [ 66.537213][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 66.553708][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 66.571490][ T24] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 66.586926][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.599280][ T24] usb 2-1: Product: syz [ 66.604000][ T24] usb 2-1: Manufacturer: syz [ 66.610719][ T24] usb 2-1: SerialNumber: syz [ 66.618561][ T1254] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 66.632880][ T24] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 66.653587][ T1242] netlink: 'syz.2.204': attribute type 23 has an invalid length. [ 66.673502][ T1242] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.684846][ T1242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.696146][ T1242] IPv6: NLM_F_CREATE should be set when creating new route [ 66.749731][ T24] usb 3-1: USB disconnect, device number 7 [ 66.792751][ T1269] loop5: detected capacity change from 0 to 131072 [ 66.807640][ T1269] F2FS-fs (loop5): Test dummy encryption mode enabled [ 66.817349][ T1269] F2FS-fs (loop5): invalid crc value [ 66.828400][ T1269] F2FS-fs (loop5): Found nat_bits in checkpoint [ 66.855296][ T6] usb 2-1: USB disconnect, device number 4 [ 66.888839][ T1269] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 66.907947][ T1269] F2FS-fs (loop5): Start checkpoint disabled! [ 66.915855][ T1269] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 66.928631][ T1269] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 66.948563][ T1269] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 66.966258][ T743] EXT4-fs (loop6): unmounting filesystem. [ 67.131718][ T1301] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 67.142754][ T1301] overlayfs: missing 'lowerdir' [ 67.447451][ T406] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 67.799462][ T1292] syz.4.217 (1292) used greatest stack depth: 20576 bytes left [ 67.827350][ T1303] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 67.854024][ T1303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 67.916190][ T1303] F2FS-fs (loop2): invalid crc value [ 67.984254][ T1303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 68.006061][ T1320] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 68.015506][ T1320] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.071337][ T1319] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 68.079220][ T1329] exfat: Deprecated parameter 'utf8' [ 68.092818][ T1319] overlayfs: failed to verify index dir 'upper' xattr [ 68.102525][ T1319] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 68.113756][ T1329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 68.121954][ T1303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 68.144944][ T1303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.156583][ T743] EXT4-fs (loop6): unmounting filesystem. [ 68.193991][ T406] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.218941][ T406] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.268700][ T1341] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 68.298553][ T1341] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.384440][ T1355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.418098][ T743] EXT4-fs (loop6): unmounting filesystem. [ 68.446583][ T1357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.461853][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 68.472303][ T1357] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.491370][ T1357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'. [ 68.503438][ T1357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.235'. [ 68.639985][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.656857][ T60] usb 5-1: Using ep0 maxpacket: 16 [ 68.676010][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.718356][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 68.738219][ T1376] tipc: Started in network mode [ 68.744182][ T60] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 68.745126][ T1376] tipc: Node identity ac1414aa, cluster identity 4711 [ 68.762149][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.775680][ T1357] x_tables: unsorted entry at hook 1 [ 68.786604][ T1376] tipc: New replicast peer: 0.0.0.0 [ 68.787545][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.813505][ T1376] tipc: Enabled bearer , priority 10 [ 68.818933][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.835990][ T60] usb 5-1: SerialNumber: syz [ 68.848418][ T1336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 68.868628][ T1336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 68.902018][ T60] hub 5-1:1.0: bad descriptor, ignoring hub [ 68.917061][ T6] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.940244][ T60] hub: probe of 5-1:1.0 failed with error -5 [ 68.956957][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.972994][ T290] EXT4-fs (loop2): unmounting filesystem. [ 68.984587][ T1384] ext4: Unknown parameter 'euid>00000000000000000000' [ 68.988006][ T6] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.019542][ T6] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 69.052411][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.080632][ T6] usb 6-1: Product: syz [ 69.103184][ T1336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.116804][ T1336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 69.117309][ T6] usb 6-1: Manufacturer: syz [ 69.216944][ T1386] set_capacity_and_notify: 9 callbacks suppressed [ 69.216973][ T1386] loop1: detected capacity change from 0 to 40427 [ 69.237409][ T1386] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 69.276106][ T1386] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 69.431230][ T1386] F2FS-fs (loop1): invalid crc value [ 69.573187][ T1386] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 69.745003][ T1386] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 69.755698][ T1386] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 69.806783][ T308] tipc: Node number set to 2886997162 [ 69.839767][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 69.839781][ T28] audit: type=1400 audit(1792812140.236:409): avc: denied { mounton } for pid=1385 comm="syz.1.246" path="/52/file1/file0" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.147186][ T6] usb 6-1: SerialNumber: syz [ 70.155825][ T60] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 70.190875][ T28] audit: type=1400 audit(1792812140.586:410): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 70.242420][ T1403] loop2: detected capacity change from 0 to 512 [ 70.276399][ T1403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.300953][ T1403] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.379933][ T287] syz-executor: attempt to access beyond end of device [ 70.379933][ T287] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 70.403395][ T287] syz-executor: attempt to access beyond end of device [ 70.403395][ T287] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 70.412699][ T28] audit: type=1400 audit(1792812140.796:411): avc: denied { setopt } for pid=1335 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 70.455778][ T287] syz-executor: attempt to access beyond end of device [ 70.455778][ T287] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.528110][ T1416] netlink: 'syz.2.248': attribute type 9 has an invalid length. [ 70.547768][ T1416] netlink: 'syz.2.248': attribute type 7 has an invalid length. [ 70.559150][ T1416] netlink: 'syz.2.248': attribute type 8 has an invalid length. [ 70.675882][ T287] bridge0: port 3(syz_tun) entered disabled state [ 70.694064][ T287] device syz_tun left promiscuous mode [ 70.703782][ T287] bridge0: port 3(syz_tun) entered disabled state [ 70.739739][ T8] tipc: Disabling bearer [ 70.763865][ T8] tipc: Left network mode [ 70.861532][ T24] usb 5-1: USB disconnect, device number 7 [ 70.879187][ T24] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 71.305883][ T8] device bridge_slave_1 left promiscuous mode [ 71.313844][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.323609][ T8] device bridge_slave_0 left promiscuous mode [ 71.330725][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.340533][ T8] device veth1_macvtap left promiscuous mode [ 71.348902][ T8] device veth0_vlan left promiscuous mode [ 71.534348][ T1435] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.560570][ T1435] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.569124][ T1435] device bridge_slave_0 entered promiscuous mode [ 71.586602][ T1435] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.599731][ T1435] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.619033][ T1435] device bridge_slave_1 entered promiscuous mode [ 71.671436][ T1453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 71.681947][ T1453] overlayfs: missing 'lowerdir' [ 71.984566][ T60] usb 6-1: USB disconnect, device number 2 [ 72.065053][ T28] audit: type=1400 audit(1792812142.456:412): avc: denied { create } for pid=1459 comm="syz.6.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 72.089419][ T290] EXT4-fs (loop2): unmounting filesystem. [ 72.129241][ T28] audit: type=1400 audit(1792812142.516:413): avc: denied { mounton } for pid=1459 comm="syz.6.257" path="/32/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 72.173815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.192448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.209059][ T1482] netlink: 9052 bytes leftover after parsing attributes in process `syz.6.259'. [ 72.231221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.245738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.255910][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.263414][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.275084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.300188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.314946][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.325723][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.378947][ T1486] netlink: 100 bytes leftover after parsing attributes in process `syz.6.259'. [ 72.391949][ T1486] netlink: 100 bytes leftover after parsing attributes in process `syz.6.259'. [ 72.410793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.421829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.424603][ T1489] loop4: detected capacity change from 0 to 512 [ 72.445921][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.462536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.472239][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 72.496193][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 72.510735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.527995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.540045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.541567][ T1493] FAULT_INJECTION: forcing a failure. [ 72.541567][ T1493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 72.551245][ T1435] device veth0_vlan entered promiscuous mode [ 72.566685][ T1493] CPU: 1 PID: 1493 Comm: syz.6.262 Not tainted syzkaller #0 [ 72.566713][ T1493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.585746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.586835][ T1493] Call Trace: [ 72.586843][ T1493] [ 72.586850][ T1493] __dump_stack+0x21/0x24 [ 72.586877][ T1493] dump_stack_lvl+0x110/0x170 [ 72.586892][ T1493] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.586908][ T1493] dump_stack+0x15/0x24 [ 72.604977][ T1435] device veth1_macvtap entered promiscuous mode [ 72.611849][ T1493] should_fail_ex+0x3bf/0x510 [ 72.611883][ T1493] should_fail_alloc_page+0x61/0x90 [ 72.611909][ T1493] prepare_alloc_pages+0x131/0x570 [ 72.672700][ T1493] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 72.679107][ T1493] __alloc_pages+0x15b/0x610 [ 72.686346][ T1493] ? __cfi___alloc_pages+0x10/0x10 [ 72.693425][ T1493] ? try_charge_memcg+0x258/0x1650 [ 72.698958][ T1493] ? __this_cpu_preempt_check+0x13/0x20 [ 72.706133][ T1493] ? memcg_rstat_updated+0x56/0x110 [ 72.713122][ T1493] ? __this_cpu_preempt_check+0x13/0x20 [ 72.719747][ T1493] __folio_alloc+0x12/0x40 [ 72.727591][ T1493] shmem_alloc_and_acct_folio+0x6dd/0x8c0 [ 72.736166][ T1493] ? shmem_replace_folio+0x660/0x660 [ 72.743156][ T1493] ? xas_start+0x31d/0x3e0 [ 72.748895][ T1493] ? xas_load+0x3a2/0x3c0 [ 72.753985][ T1493] ? __filemap_get_folio+0x848/0xa70 [ 72.759666][ T1493] ? __cfi___filemap_get_folio+0x10/0x10 [ 72.767069][ T1493] shmem_get_folio_gfp+0xd6d/0x20f0 [ 72.773577][ T1493] ? xas_find+0x6ec/0x820 [ 72.779198][ T1493] shmem_fault+0x1ab/0x670 [ 72.787521][ T1493] ? __cfi_shmem_fault+0x10/0x10 [ 72.794831][ T1493] ? __kasan_check_write+0x14/0x20 [ 72.801125][ T1493] ? vma_data_pages+0xfc/0x130 [ 72.808584][ T1493] do_fault+0x19de/0x1e30 [ 72.817586][ T1493] ? pte_marker_clear+0x220/0x220 [ 72.824912][ T1493] ? check_preemption_disabled+0x71/0x120 [ 72.832580][ T1493] ? memcg_rstat_updated+0x56/0x110 [ 72.836489][ T1460] loop5: detected capacity change from 0 to 131072 [ 72.842295][ T1493] handle_mm_fault+0x1363/0x26b0 [ 72.842328][ T1493] ? __cfi_handle_mm_fault+0x10/0x10 [ 72.842348][ T1493] __get_user_pages+0x34b/0xdb0 [ 72.842368][ T1493] ? populate_vma_page_range+0x120/0x120 [ 72.842385][ T1493] ? do_mmap+0x8bd/0xdd0 [ 72.842406][ T1493] ? userfaultfd_unmap_complete+0x28f/0x310 [ 72.859398][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 72.860160][ T1493] __mm_populate+0x2ea/0x430 [ 72.868957][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 72.872067][ T1493] ? __cfi___mm_populate+0x10/0x10 [ 72.872103][ T1493] vm_mmap_pgoff+0x271/0x3f0 [ 72.880943][ T1460] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.882983][ T1493] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 72.883014][ T1493] ? __x64_sys_futex+0x100/0x100 [ 72.924722][ T1460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 72.924866][ T1493] ksys_mmap_pgoff+0xf6/0x1d0 [ 72.970542][ T1493] ? __kasan_check_write+0x14/0x20 [ 72.976874][ T1493] __x64_sys_mmap+0xfa/0x110 [ 72.984267][ T1493] x64_sys_call+0x8fd/0x9a0 [ 72.990429][ T1493] do_syscall_64+0x4c/0xa0 [ 72.995822][ T1493] ? clear_bhb_loop+0x30/0x80 [ 73.005300][ T1493] ? clear_bhb_loop+0x30/0x80 [ 73.014233][ T1493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.024318][ T1493] RIP: 0033:0x7f8b8679f559 [ 73.028932][ T1493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.054029][ T1493] RSP: 002b:00007f8b876c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 73.064275][ T1493] RAX: ffffffffffffffda RBX: 00007f8b86a25fa0 RCX: 00007f8b8679f559 [ 73.074726][ T1493] RDX: b635773f06ebbeea RSI: 0000000000b36000 RDI: 0000200000000000 [ 73.084900][ T1493] RBP: 00007f8b86836b20 R08: ffffffffffffffff R09: 0000000028f43000 [ 73.094692][ T1493] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 73.106446][ T1493] R13: 00007f8b86a26038 R14: 00007f8b86a25fa0 R15: 00007ffdb97deb28 [ 73.115990][ T1493] [ 73.120121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.133081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.156838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.237586][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 73.777689][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.962648][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 74.024550][ T1509] loop4: detected capacity change from 0 to 512 [ 74.034551][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 74.100401][ T1509] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.265: missing EA_INODE flag [ 74.126015][ T1509] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.265: error while reading EA inode 12 err=-117 [ 74.146662][ T1509] EXT4-fs (loop4): 1 orphan inode deleted [ 74.155244][ T1509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.234949][ T1521] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 74.246655][ T1521] overlayfs: missing 'lowerdir' [ 74.465502][ T6] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.480941][ T6] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 74.497389][ T6] usb 6-1: config 0 interface 0 has no altsetting 0 [ 74.505778][ T6] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 74.527564][ T8] device bridge_slave_1 left promiscuous mode [ 74.536667][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.537617][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.567780][ T6] usb 6-1: config 0 descriptor?? [ 74.588095][ T8] device bridge_slave_0 left promiscuous mode [ 74.594611][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.612315][ T8] device veth1_macvtap left promiscuous mode [ 74.631805][ T8] device veth0_vlan left promiscuous mode [ 74.809662][ T28] audit: type=1400 audit(1792812145.206:414): avc: denied { map } for pid=1507 comm="syz.4.265" path="/60/file0/blkio.bfq.io_service_bytes" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 74.972882][ T291] EXT4-fs (loop4): unmounting filesystem. [ 75.005493][ T1460] bridge0: port 3(syz_tun) entered blocking state [ 75.015312][ T1460] bridge0: port 3(syz_tun) entered disabled state [ 75.027361][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 75.044745][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 75.068017][ T1460] device syz_tun entered promiscuous mode [ 75.078975][ T1460] bridge0: port 3(syz_tun) entered blocking state [ 75.088474][ T1460] bridge0: port 3(syz_tun) entered forwarding state [ 75.129562][ T1527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'. [ 75.180962][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 75.190419][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 75.198907][ T6] usb 6-1: USB disconnect, device number 3 [ 75.206959][ T409] bridge0: port 3(syz_tun) entered disabled state [ 75.231180][ T1538] loop4: detected capacity change from 0 to 512 [ 75.243701][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 75.255518][ T1538] EXT4-fs: Ignoring removed oldalloc option [ 75.263871][ T1538] ext4: Unknown parameter 'measure' [ 75.313443][ T1538] loop4: detected capacity change from 0 to 1024 [ 75.320702][ T1538] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 75.352879][ T1538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 75.448119][ T1538] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.272: corrupted in-inode xattr [ 75.469337][ T291] EXT4-fs (loop4): unmounting filesystem. [ 75.728067][ T1545] loop4: detected capacity change from 0 to 512 [ 76.638570][ T1559] loop5: detected capacity change from 0 to 512 [ 76.646869][ T1559] EXT4-fs: Ignoring removed orlov option [ 76.655050][ T1559] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.666356][ T1559] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.277: corrupted in-inode xattr [ 76.721223][ T1559] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.277: couldn't read orphan inode 15 (err -117) [ 76.736418][ T1559] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 76.749430][ T1566] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.279'. [ 76.816585][ T1569] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 76.827115][ T1569] overlayfs: missing 'lowerdir' [ 76.861169][ T570] EXT4-fs (loop5): unmounting filesystem. [ 78.162921][ T1583] loop4: detected capacity change from 0 to 256 [ 78.678869][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 78.786768][ T28] audit: type=1400 audit(1792812149.116:415): avc: denied { override_creds } for pid=1584 comm="syz.2.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.820092][ T1583] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0612b11d, utbl_chksum : 0xe619d30d) [ 78.835090][ T1583] exFAT-fs (loop4): IO charset iso;859-792$N-$޽u.+ y [SfЌIյQJn not found [ 78.918936][ T1579] overlayfs: workdir and upperdir must be separate subtrees [ 78.978331][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 79.030175][ T364] udevd[364]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 79.899539][ T1617] loop5: detected capacity change from 0 to 512 [ 79.907648][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 79.990171][ T1627] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.291'. [ 80.103316][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 80.116571][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 80.855611][ T1636] loop6: detected capacity change from 0 to 8192 [ 80.863362][ T364] udevd[364]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 80.879185][ T364] udevd[364]: inotify_add_watch(7, /dev/loop6, 10) failed: Not a directory [ 82.291711][ T743] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 82.302955][ T743] FAT-fs (loop6): Filesystem has been set read-only [ 82.314031][ T743] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 82.334317][ T1647] loop5: detected capacity change from 0 to 256 [ 82.343831][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 82.358162][ T1644] bridge0: port 1(syz_tun) entered disabled state [ 82.368967][ T1644] device syz_tun left promiscuous mode [ 82.374600][ T1644] bridge0: port 1(syz_tun) entered disabled state [ 82.386970][ T1647] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd400a224, utbl_chksum : 0xe619d30d) [ 82.415863][ T1651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 82.437253][ T1649] loop2: detected capacity change from 0 to 256 [ 82.487272][ T364] udevd[364]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 82.512715][ T1649] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 82.625852][ T28] audit: type=1400 audit(1792812153.006:416): avc: denied { setattr } for pid=1646 comm="syz.5.298" name="file0" dev="loop5" ino=1048738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.950118][ T28] audit: type=1400 audit(1792812153.066:417): avc: denied { create } for pid=1646 comm="syz.5.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 83.346800][ T1668] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.303'. [ 83.515565][ T1672] loop5: detected capacity change from 0 to 1024 [ 83.526995][ T1672] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.534831][ T1672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.567230][ T1672] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 83.588721][ T1672] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.304: couldn't read orphan inode 11 (err -117) [ 83.604920][ T1672] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 83.617875][ T1672] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.304: Invalid block bitmap block 0 in block_group 0 [ 83.637936][ T1672] Quota error (device loop5): write_blk: dquota write failed [ 83.647448][ T1672] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 83.661100][ T1672] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.304: Failed to acquire dquot type 0 [ 83.681323][ T28] audit: type=1400 audit(1792812154.076:418): avc: denied { remount } for pid=1671 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 83.705407][ T1672] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 83.724751][ T570] EXT4-fs (loop5): unmounting filesystem. [ 83.734427][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 83.746765][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 83.906879][ T1686] netlink: 'syz.5.306': attribute type 23 has an invalid length. [ 83.927882][ T1686] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.946709][ T1686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.955416][ T1686] IPv6: NLM_F_CREATE should be set when creating new route [ 83.974827][ T380] device bridge_slave_1 left promiscuous mode [ 83.983335][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.994533][ T380] device veth1_macvtap left promiscuous mode [ 84.004454][ T380] device veth0_vlan left promiscuous mode [ 84.014831][ T28] audit: type=1400 audit(1792812154.406:419): avc: denied { append } for pid=1689 comm="syz.5.308" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 84.016448][ T1690] x_tables: duplicate underflow at hook 1 [ 84.092718][ T1690] loop5: detected capacity change from 0 to 2048 [ 84.100488][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 84.127041][ T1690] loop5: p1 p3 < > p4 < p5 > [ 84.135367][ T1690] loop5: partition table partially beyond EOD, truncated [ 84.144079][ T1690] loop5: p1 size 196608 extends beyond EOD, truncated [ 84.152222][ T1690] loop5: p3 start 614273 is beyond EOD, truncated [ 84.160375][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 84.172597][ T1690] loop5: p5 size 196608 extends beyond EOD, truncated [ 84.174390][ T910] udevd[910]: inotify_add_watch(7, /dev/loop5p4, 10) failed: Not a directory [ 84.181620][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5p1, 10) failed: Not a directory [ 84.204515][ T910] udevd[910]: inotify_add_watch(7, /dev/loop5p5, 10) failed: Not a directory [ 84.379395][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 84.394606][ T364] udevd[364]: inotify_add_watch(7, /dev/loop5, 10) failed: Not a directory [ 85.595489][ T1702] loop2: detected capacity change from 0 to 256 [ 85.615344][ T364] udevd[364]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 85.624026][ T1702] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 85.658002][ T1702] FAULT_INJECTION: forcing a failure. [ 85.658002][ T1702] name failslab, interval 1, probability 0, space 0, times 1 [ 85.696682][ T1702] CPU: 1 PID: 1702 Comm: syz.2.311 Not tainted syzkaller #0 [ 85.705877][ T1702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 85.720454][ T1702] Call Trace: [ 85.725889][ T1702] [ 85.729867][ T1702] __dump_stack+0x21/0x24 [ 85.737448][ T1702] dump_stack_lvl+0x110/0x170 [ 85.745842][ T1702] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.752583][ T1702] ? __kasan_check_write+0x14/0x20 [ 85.762109][ T1702] dump_stack+0x15/0x24 [ 85.770372][ T1702] should_fail_ex+0x3bf/0x510 [ 85.776764][ T1702] ? getname_flags+0xba/0x510 [ 85.784731][ T1702] __should_failslab+0xac/0xf0 [ 85.792529][ T1702] should_failslab+0x9/0x20 [ 85.798123][ T1702] kmem_cache_alloc+0x3b/0x320 [ 85.806485][ T1702] getname_flags+0xba/0x510 [ 85.812663][ T1702] __x64_sys_mkdirat+0x7c/0xa0 [ 85.817815][ T1702] x64_sys_call+0x73d/0x9a0 [ 85.825575][ T1702] do_syscall_64+0x4c/0xa0 [ 85.838525][ T1702] ? clear_bhb_loop+0x30/0x80 [ 85.844961][ T1702] ? clear_bhb_loop+0x30/0x80 [ 85.852283][ T1702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.859854][ T1702] RIP: 0033:0x7fbfeb59f559 [ 85.868916][ T1702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.893568][ T1702] RSP: 002b:00007fbfec4ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 85.906234][ T1702] RAX: ffffffffffffffda RBX: 00007fbfeb825fa0 RCX: 00007fbfeb59f559 [ 85.918188][ T1702] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 85.928934][ T1702] RBP: 00007fbfec4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 85.937887][ T1702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.949452][ T1702] R13: 00007fbfeb826038 R14: 00007fbfeb825fa0 R15: 00007ffdbe392ff8 [ 85.959730][ T1702] [ 86.062116][ T1715] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.315'. [ 86.106737][ T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 86.306748][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 86.319510][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.332895][ T19] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 86.345691][ T19] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 86.362890][ T19] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 86.379224][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.390401][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.402113][ T19] usb 6-1: SerialNumber: syz [ 86.412642][ T1711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 86.426112][ T1711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 86.437872][ T19] hub 6-1:1.0: bad descriptor, ignoring hub [ 86.448319][ T19] hub: probe of 6-1:1.0 failed with error -5 [ 86.659030][ T1711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 86.670133][ T1711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 87.087691][ T19] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 87.336715][ T19] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 87.532612][ T308] usb 6-1: USB disconnect, device number 4 [ 87.540774][ T308] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 87.557711][ T19] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 87.572825][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.600671][ T19] usb 3-1: config 0 descriptor?? SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=7 req=251 state=3 status=67 (errno 32: Broken pipe) [ 88.146673][ T28] audit: type=1400 audit(1792812158.536:420): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[15003]" dev="pipefs" ino=15003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 88.193143][ T1581] bridge0: port 3(syz_tun) entered disabled state [ 88.201627][ T1581] bridge0: port 3(syz_tun) entered disabled state [ 88.238929][ T19] usb 3-1: Cannot set autoneg [ 88.280582][ T19] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 88.317363][ T19] usb 3-1: USB disconnect, device number 8 [ 88.413365][ T1734] bridge0: port 3(syz_tun) entered disabled state [ 88.422074][ T1734] device syz_tun left promiscuous mode [ 88.428048][ T1734] bridge0: port 3(syz_tun) entered disabled state [ 89.017803][ T8] device bridge_slave_1 left promiscuous mode [ 89.024869][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.032571][ T8] device bridge_slave_0 left promiscuous mode [ 89.040146][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.048824][ T8] device bridge_slave_1 left promiscuous mode [ 89.055393][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.063441][ T8] device bridge_slave_0 left promiscuous mode [ 89.069824][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.077892][ T8] device bridge_slave_1 left promiscuous mode [ 89.086367][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.097011][ T8] device bridge_slave_0 left promiscuous mode [ 89.109293][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.120015][ T8] device veth1_macvtap left promiscuous mode [ 89.130419][ T8] device veth0_vlan left promiscuous mode [ 89.138039][ T8] device veth1_macvtap left promiscuous mode [ 89.145882][ T8] device veth0_vlan left promiscuous mode