last executing test programs: 16m36.362915711s ago: executing program 32 (id=482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x5, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r4, &(0x7f0000000040)=0x4, 0x6) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r5, 0x0, 0xd, &(0x7f0000000300)='sched_switch\x00'}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1a, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) sync() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 14m20.379372498s ago: executing program 33 (id=775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000480)=""/167, 0xa7}], 0x3, 0x7, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r2, &(0x7f0000000040)={0x38}, 0x38, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00703cf3dfffffffffffffff08722f0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) creat(0x0, 0xecf86c37d53049c2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f000000c2c0)=[0x0], 0x1}, 0x58) socket(0x1e, 0x4, 0x0) 14m2.154546054s ago: executing program 34 (id=787): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_pts(r0, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 13m21.457496494s ago: executing program 35 (id=881): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2818cf8, &(0x7f0000000800)={[{@abort}, {@acl}], [{@obj_user={'obj_user', 0x3d, '\xf3>)\x00-~[\b/)\x9e\xb7\xdbQ\xb2)\x97l\x8e\x9d\n\x12w\xf3\x85\xef\xe7\xe5\xb93\xc13t\x84\r\x80\xc8\xed\xe9!q\xcbI\xcd\x95*\x93\xc1b\xca\xea#\xb0y\xc35\xa1\xc7\xf1\xa7\xb2p\x91\xe1\x14\x0e\xa6\xfd&\xd8T@\xa7\xb8\xf3\xc6\x9f\xe0y\x06\xd13\xb7\xd1\xc2\xdc\x83Z\xe7\x1dm\xddX\x8c\xa4\x99\x83~\xa0\xc8B\xff[@\xe4Yd/\xd2\x17\xfa\"v#\r\xd5\x9e\x99\x93\xb1\xffj\xb7P\xc3k\xa7\xaf|\xe3\xf3\xee\x9b\xfc\x9a\xf3\t\xaf~]e\xe5\xc9\xa0\xb1W\x9d\xd8\xea\"\x06Kf\xcaO\xad\xfa\xeeq\xdf\xaf\x93B\x05\xa79_\xa5\xd4\x91\xecd\xe4r\xe4L\xc9C\xb0\xceQTm\xebX!\xeb\x8d{4\xcc\xf0\x13\x03\b\xa37\xc8b?\xd1\xe4!\xb3\xc8R\xb9\x16.\x0fr\xfb<\x8f\xd2\\\xc3\xb9]\xa4\xd2\xaa\x99\x93\xcdn\xcea\xb1\xfak\xfaD\x9e\x1abR\xc68\xe1\xb0\x88\xf7\x87\xd0\x8e\x81g\x945\xdfP\xb6+P\x7f\xac\xe9\xd9;Qe0\f\xca\xb0\x97\x94\xc8\xe4\xcfy\xfeU\xd7\f\xe3\xae\xd1E\xfe\x98\x9f3\x01\x03\xe2\xfa\xf2\xea\xf0\t_\xf0NF'}}, {@hash}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@flag='async'}]}, 0xfb, 0x4aa, &(0x7f0000000cc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001400)=ANY=[@ANYRESOCT=r0, @ANYRES64=r2, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="150100003eeeee0baf356bbd615b5a0cdee52d933d61adc6698d37fa2d0007f3566e91bb267bd5802d132e502c45867f61d18ea0b40a05e6805d14effbf927b62266", @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x200000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000400)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x10, 0x2}, {0xfff3, 0xb}, {0xfff3, 0xfff2}}}, 0x24}}, 0x20004000) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x3, r9, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3", @ANYRES64=r9, @ANYRESDEC=r8, @ANYRES64=r8], 0xdd12}, {&(0x7f0000000600)=ANY=[], 0x4d8}, {&(0x7f0000004940)=ANY=[@ANYBLOB="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"], 0x1ea8}], 0x3, 0x0, 0x0, 0x4008084}, 0x10) read(r5, &(0x7f0000000240)=""/123, 0x7b) 10m36.489062928s ago: executing program 36 (id=1116): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xd, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x1, 0x50a, &(0x7f0000000200)="$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") r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x300000000000000) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800440, &(0x7f0000000400)={[{@shortname_lower}, {@utf8no}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@fat=@nocase}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_win95}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8}, {@uni_xlate}, {@uni_xlate}, {@rodir}]}, 0xff, 0x365, &(0x7f0000000940)="$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") 10m26.643200529s ago: executing program 9 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x141840, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000ffff000004000000ff00000000000000ef012c09f77cf62b5c65efa6b30b64a74a790760d59f212bf2753de255", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r7, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) bind$bt_sco(r7, &(0x7f0000000280)={0x1f, @none}, 0x8) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x29c, 0x0, 0x2, 0x70bd25, 0x76, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4040890}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140), 0x4) 10m22.548047453s ago: executing program 9 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x748d}], 0x1, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000a00)={0x101ff, 0x4, 0x0, 0x2000, &(0x7f000069e000/0x2000)=nil, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x23, 0x44b, &(0x7f00000004c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1880c20, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r5, &(0x7f0000004580), 0x0, 0x0) recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 10m5.879775965s ago: executing program 37 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r3, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x748d}], 0x1, 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000a00)={0x101ff, 0x4, 0x0, 0x2000, &(0x7f000069e000/0x2000)=nil, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@test_dummy_encryption_v1}, {@resgid}]}, 0x23, 0x44b, &(0x7f00000004c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x1880c20, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r5, &(0x7f0000004580), 0x0, 0x0) recvmmsg(r5, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) 7m49.671321016s ago: executing program 0 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) pipe2$9p(&(0x7f0000000180), 0x8880) r0 = socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r5}, 0x11) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x10, 0x4}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) alarm(0x8) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 7m46.618506456s ago: executing program 0 (id=1358): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='6\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) unshare(0x22020400) finit_module(r7, 0x0, 0x2) 7m44.584709343s ago: executing program 0 (id=1361): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) 7m40.378100679s ago: executing program 0 (id=1369): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000016000000b70300000000fff48500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0080351327c9167c643c4a1b7880610cc9", 0x26, 0x4080, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m37.626446276s ago: executing program 0 (id=1373): syz_usb_connect(0x6, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x44, 0xbc, 0x2a, 0x20, 0x45e, 0x723, 0xb610, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xe, 0x1, 0x0, 0x2}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) syz_open_procfs$pagemap(0x0, 0x0) socket(0x10, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpgid(0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 7m30.474146321s ago: executing program 0 (id=1378): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 7m15.353329042s ago: executing program 38 (id=1378): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, 0x0, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) 6m47.938156277s ago: executing program 2 (id=1447): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000e67ce832421d7830651a134065ccf1ef1a0550449fc532253c7c460765ca619f6a8a227895687b58313b264364eafeb7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYRES32=r4], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001280)={0x18, 0x76, 0x1, 0x4, 0x0, "", [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x77}]}]}, 0x18}], 0x1}, 0x4044070) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) process_vm_writev(r9, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r10, 0x5418, &(0x7f00000001c0)=0xfffffe00) ioctl$TCSETSF(r10, 0x5404, &(0x7f0000000040)={0x5, 0xf7af, 0x8000, 0x8, 0x0, "4cb8b210acdc716f64cf76062d59a56f2584c4"}) 6m45.498434019s ago: executing program 2 (id=1452): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 6m43.120204721s ago: executing program 2 (id=1455): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d8, &(0x7f0000000640)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x14, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 6m40.711027103s ago: executing program 2 (id=1459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) chdir(&(0x7f00000003c0)='./bus\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x28}}, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000200)={0x4, 0x7dc, 0x10002, 0xc8, 0xf, 0x5, 0xffffffffffffffff, 0x110004, 0x1000000}) r10 = dup(r2) write$UHID_INPUT(r10, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) sendfile(r1, r0, 0x0, 0x80000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 6m38.090552608s ago: executing program 2 (id=1461): socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) pause() syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000340)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {}, {@nouid32}, {@sysvgroups}, {@nojournal_checksum}, {@noauto_da_alloc}, {@test_dummy_encryption}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@acl}]}, 0x1, 0x47f, &(0x7f0000002080)="$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") 6m24.227255622s ago: executing program 2 (id=1485): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100), 0x4) 6m9.055500174s ago: executing program 39 (id=1485): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100), 0x4) 3m58.878895584s ago: executing program 1 (id=1738): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) pwrite64(r0, &(0x7f0000000200)='2', 0x1, 0x8080c61) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r8, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800ef01000000000000000500"/28], 0x1c}, 0x1, 0x11}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0) 3m56.124482121s ago: executing program 1 (id=1742): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000240), 0xc) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22008000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xfffffffa, 0x7d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x9, 0xd}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3m54.968302037s ago: executing program 1 (id=1744): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 3m53.570828185s ago: executing program 1 (id=1746): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 3m52.251094262s ago: executing program 1 (id=1748): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='nodots,dots,dots,dots,dots,usefree,nfs=nostale_ro,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f646f74732c616c6c6f775f7574fcf8b27630303030303030303030303030303030303030303031312c646f74732c757365667265652c636f6465706167653d3836342c6e6f646f74732c646f74732c6e6f646f74732c646f74732c646f74732c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c646f74732c00"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)={0x3000200c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000140)={0xa0000001}) epoll_wait(r4, &(0x7f0000000240)=[{}, {}], 0x2, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) fsetxattr$security_capability(r8, &(0x7f0000000180), 0x0, 0x0, 0x2) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 3m47.859177881s ago: executing program 1 (id=1756): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000000000205000017e0e07f210900020000004052528a00"/37], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756f695f786c6174653d302c696f636861727365743d757466382c757466383d3067e695c1cd8580386e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00"], 0x1, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x8850) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4620, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xe27a}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x0, 0xb7, 0xffffffff, 0x3}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m32.719883262s ago: executing program 40 (id=1756): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000000000205000017e0e07f210900020000004052528a00"/37], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYBLOB="757466383d312c696f636861727365743d6b6f69382d722c756f695f786c6174653d302c696f636861727365743d757466382c757466383d3067e695c1cd8580386e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c636865636b3d72656c617865642c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303737372c00"], 0x1, 0x363, &(0x7f0000000280)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r6, 0x852dd6c070cd7e4d}, 0x14}, 0x4, 0x700000000000000}, 0x8850) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x4620, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0xe27a}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x0, 0xb7, 0xffffffff, 0x3}}, 0xe8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m32.988369846s ago: executing program 3 (id=1878): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) pipe2$9p(&(0x7f0000000180), 0x8880) r0 = socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@loopback, @broadcast}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r6}, 0x18) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x10, 0x4}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) alarm(0x8) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m31.374129807s ago: executing program 3 (id=1886): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1000811, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0, @ANYRES64, @ANYRES16, @ANYRES32], 0x2, 0x1da, &(0x7f00000011c0)="$eJzsmb/v0kAYxp+79gtfiTFxcXDRRBIxQmmLGhYGTNxNwF+bRCpBCxioCZA4EBcXRwcTV/8BBwcmBzc3Vx3UxMRBRueaO4725FcghoSE95NwfXp97973XuAZAARBHCw/vv/59vJ6sZoFcBJpJNX8LyOO4Vr819dPL78q3Xjz7svbj+1Tz8bz+zEAYbhx+pFI86FsIFATYfjv6rS6VsEjfQscl5S+AwZL6fvguK20B4Z7Sj/SdOeEEr5nPej49YdN37PF4IjBFUNBz28CmIwY6gCOVX1Me94bDB/XfN/rzoujcJZn4dG2Yl0DTcCclDlKWv/E+3X3xfORuJ/1xtb654DDUboAhorSRSRhWVbcEu38Z814f2OT8++DOJ1bF5PdgwoPSYTYizJ8j83PiC90NHNmMv60uOrnLgs7v9sjS+MCsPDoc+r/dk4oE1gaE/unsNyLmj+ZMCP/yAetJ/neYJhrtmoNr+G1Xbdwzb5i21fdvDSi6bjG/46lP6W0/Y9WxCZYAv1aEHSdPhB0nejenY6a41bed37LNVz6H0fmwnQP8VGRx04uz8HUi8urUBljZfEEQRAEQRAEQRAEQRAEQRBbcQ5M/gqq/qgKV+DelNF/AwAA///OPWl8") r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) brk(0x7) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x100000000, 0xca8}, {0x6, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$eJzs3WFrI2kdAPD/TJJed7dncypynnh3eCfdQzdpr95dEbk7QfTVgXq+79U2LaVpU5p03ZZFu/gBBBEVfOUr3wh+AEH2I4iwoO9FRRHd1Ze6I0mmum2TNrttmrX9/WCa58kzM///MzSTmczDTACX1ssR8W5EFCLitYiYzN9P82m+Xdnrzvfg/u3F9pRElr3/tySS/L39dbXrxYi41l0kxiPi61+J+GZyNG5zZ3dtoV6vbeX1amt9s9rc2b2xur6wUlupbczOzrw599bcG3PTWe5U/SxHxNtf+tMPv/ezL7/9q89+6/fzf7n+7XZaX/hY8ok8vcVTBeiju+5SZ1vsa2+jrWEEG4FC3p9SYdSZAAAwiPYx/ocj4lOd4//JKHSO5gAAAICLJHtnIv6VRGQAAADAhZVGxEQkaSUfCzARaVqpdMfwfjSupvVGs/WZ5cb2xlK7LaIcpXR5tV6bzscKl6OUtOsz+Rjb/frrh+qzEfFcRPxg8kqnXlls1JdG/eMHAAAAXBLXXjp4/v/PybRTBgAAAC6Yct8KAAAAcFE45QcAAICL786oEwAAAACG6avvvdeesv3neC/d3Nlea9y8sVRrrlXWtxcri42tzcpKo7HSuWff+knrqzcam5+Lje1b1Vat2ao2d3bn1xvbG6351QOPwAYAAADO0XMv3f1dEhF7n7/SmSK/DyDAAX8cdQLAWSqMOgFgZIrtPx+MOgtgFEonzlE8lzyA0UlOaO87eOfXZ58LAAAwHFMfP3r9fyxvO/m3AeD/mbE+AHD5uLoHl1cpCk7z4ZL7UPflmX7tj3/9//CRRZY9UWIAAMCZmehMSVrJrwVORJpWKhHPdh4LWEqWV+u16fz84LeTpWfa9ZnOksmJY4YBAAAAAAAAAAAAAAAAAAAAAAAAgK4sSyIDAAAALrSI9M9J527+EVOTr04c/HXg0FO/fvL+j24ttFpbMxFjyd8n22+NRUTrx/n7r2ceCQAAAABPge55ev46M+psAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhoHty/vbg/HWgYH27cv34xIsq94hfz0ONRioir/0ii+MhySUQUziD+3p2IeL5X/CQeZllWzrPoFf/KkOOXO5umd/w0Iq6dQXy4zO629z/v9vr8pfFy57X356+YT6fVf/+X/nf/V+iz/3l2wBgv3PtFtW/8OxEvFHvvf/bjJ934SRyK/8qA8T/4xu5uv7bspxFTPb9/kgOxqq31zWpzZ/fG6vrCSm2ltjE7O/Pm3Ftzb8xNV5dX67X8b88Y3//kLx8e1/+rfeKXD/b/yPZ/dcD+//verfsf6RZLveJff6X39+/zfeKn+Xffp/Nyu31qv7zXLT/qxZ//5sXj+r/Up//jJ/T/+oD9f+1r3/3DgLMCAOegubO7tlCv17aOKYwPMM85F955OtIYUuEp3ODDLmTf6f4/nm49p1z8SCE7zeLFOIM0xh7jc3q2hVHulQAAgGH430F/u5Ylo84HAAAAAAAAAAAAAAAAAAAALqMnvEPYeEQMPPPhmHuj6SoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLH+EwAA//+uy9et") 2m24.286898442s ago: executing program 3 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='svc_xprt_dequeue\x00', r3}, 0x18) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10) recvmmsg(r4, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000002c0)=""/3, 0x3}], 0x1}}], 0x1, 0x7fb14726fda9, 0x0) io_uring_setup(0xc34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m18.455210139s ago: executing program 3 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101e08a, &(0x7f0000000440)=ANY=[], 0x6, 0x2d4, &(0x7f0000002a80)="$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") syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r8, &(0x7f0000000180)='./file1\x00', r8, &(0x7f00000001c0)='./file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) 2m15.090543934s ago: executing program 3 (id=1905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000d04000000002e"], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r5, &(0x7f0000000040)={'#! ', '', [{0x20, ']\t'}]}, 0x7) getpeername(r5, &(0x7f0000000500)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000300)=0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCONS(r6, 0x541d) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c1f00005e0001020000000000", @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000080001006e00", @ANYRES32], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf3f82f6", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) syz_socket_connect_nvme_tcp() syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 2m14.510679991s ago: executing program 3 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 2m14.358243573s ago: executing program 41 (id=1909): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 20.989775391s ago: executing program 6 (id=2136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x40}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',']) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x80003, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$nl_route(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) madvise(&(0x7f00006c9000/0x3000)=nil, 0x3000, 0x1) 17.455976208s ago: executing program 7 (id=2141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x135c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1328, 0x2, [@TCA_MATCHALL_ACT={0x9d8, 0x2, [@m_ife={0xd8, 0xd, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_METALST={0x44, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x80000000}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xff1b}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0x3fc, 0x0, 0xab, 0x5}}}, @TCA_IFE_SMAC={0xa}]}, {0x16, 0x6, "ca96f73706b3bd8a9e25fd6316dd4b379c43"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x40, 0x6, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x8bc, 0x16, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0xa, 0x7, 0xa58, 0x1, 0x4, 0xffffffff, 0x7, 0x8000, 0xfffffff7, 0x8, 0x4, 0x3, 0x4a99790e, 0x1, 0x9, 0xffff49d2, 0x37ea, 0x5, 0x5, 0xfffffff8, 0x7, 0xf, 0x3, 0x2, 0x101, 0xfffffff2, 0x3, 0x5, 0x5df, 0x1, 0x3, 0x7f, 0xcf5, 0x6be, 0x1ff, 0x8, 0x2, 0x5, 0x401, 0xb, 0x7fff, 0x8, 0x1, 0x9, 0x5, 0x1, 0x0, 0x3, 0x6, 0xbe, 0x0, 0x4, 0x3, 0x4, 0x7, 0x5, 0x400, 0x1, 0x7, 0x0, 0x6, 0x80000001, 0x4e45, 0x7ff, 0x3ff, 0x65f, 0x9, 0x7d, 0x8, 0x7, 0x8000, 0x80, 0x6, 0x0, 0x8000, 0x9, 0x5, 0x7, 0xfff, 0x6, 0x81, 0xf4, 0x1ff, 0x6, 0x5, 0x6, 0x5, 0xffff, 0x2, 0x8, 0x2, 0xfffffff8, 0x2, 0x7, 0x7, 0x6, 0x1, 0x9, 0x58e, 0xdfb, 0x2, 0x3, 0xffff8001, 0x7455, 0x995a, 0x1, 0x1000, 0x1, 0x7fff, 0x8, 0x81, 0x9, 0x7f, 0x97d3, 0x3, 0xa, 0x0, 0x8, 0x40, 0x7fff, 0x8, 0xf, 0x1, 0x2, 0x5, 0x100, 0x0, 0x6, 0x2, 0x0, 0x10000, 0x6fd, 0x3, 0x800, 0x550, 0x9, 0x95, 0x6, 0x10, 0xffff6b02, 0x0, 0x101, 0x9, 0x6, 0x1, 0xf9, 0x6, 0xfffffffb, 0x9, 0x10001, 0xd4b, 0x4, 0x0, 0x100, 0x7, 0x1, 0xdf6, 0x8, 0x7f, 0x8e, 0xff, 0x4, 0x8, 0x6, 0xa12, 0x7, 0x3, 0x0, 0xa, 0x8000, 0x2, 0x8, 0x5, 0x0, 0x3, 0x7, 0x4ac5, 0x5, 0x9, 0xcc7, 0x8, 0x3, 0x3, 0x1ff, 0xe8, 0x3ff, 0x5, 0x3b8, 0x0, 0x80000000, 0x4, 0xa, 0x2, 0x6, 0x7f, 0x4, 0x4, 0x5, 0xdb, 0x4, 0x9, 0x4, 0x46, 0x2, 0x4, 0x1, 0x781, 0x7ff, 0xffffff4a, 0x80000001, 0x5, 0x1ff, 0x5, 0x1, 0xf, 0x9, 0x0, 0x5, 0x152a, 0xe, 0x2, 0x80000001, 0x4, 0x2, 0x8, 0x1ff, 0x401, 0xffff4065, 0x5, 0xf, 0x7, 0x9, 0x0, 0x6, 0x5, 0x8, 0xfffffffd, 0x80, 0x2, 0x7, 0x0, 0x9, 0xf, 0x3, 0xf73, 0x4, 0x4, 0x8, 0xd, 0x3, 0x3, 0x1, 0x8ac, 0x1ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7fffffff, 0x2, 0x7f, 0xb7e, 0x0, 0x3, 0x2, 0x2, 0x2, 0xc19, 0x1, 0x1, 0x126f29d5, 0x0, 0x5, 0x2, 0x2, 0x3, 0xcc19, 0x9, 0x200, 0x8, 0x8, 0x0, 0x8, 0x6, 0x1, 0xb, 0x9, 0x3, 0x200, 0x6, 0x7, 0x6526a70a, 0x401, 0x3, 0x8, 0x5, 0x9, 0x7fff, 0x4, 0x0, 0x1, 0x3ff, 0x100, 0x7, 0x3, 0x0, 0x1000, 0x1, 0x9, 0x1, 0x3, 0xebe, 0x0, 0x4731719a, 0x2, 0xbdb, 0xc, 0x5, 0x0, 0x5, 0x5, 0x1, 0x5, 0x3, 0x4, 0x2, 0x1, 0xffffffff, 0x3, 0x461, 0x2, 0x3, 0x2, 0x40, 0x1, 0x7788, 0x4, 0x4, 0x9, 0x3, 0x4, 0xf, 0x4, 0x1, 0x80000001, 0x41, 0x9, 0x3, 0xb, 0xc, 0xff, 0x3, 0x7, 0x80, 0x3, 0x2, 0x9, 0x7, 0x5, 0x3ff, 0x9, 0x401, 0x4, 0xff, 0xb059, 0x4, 0x3, 0x0, 0xe56b, 0x4, 0x10001, 0x80, 0x101, 0x10001, 0x5, 0xfffff801, 0x9572, 0x401, 0x7, 0x6f30, 0x7, 0x5, 0x6, 0xff, 0x7, 0xe, 0x6, 0x3, 0xb8, 0x6, 0x0, 0xffffffff, 0x8, 0x1, 0x1, 0xfffd, 0x80000000, 0x9270, 0x8, 0x0, 0x5, 0x10000, 0x8, 0x81a, 0x400, 0x2, 0x7, 0x100, 0x9a4, 0xff, 0x7, 0xf, 0x6, 0xfff, 0x0, 0x0, 0x3, 0x2, 0x2, 0x7, 0x6, 0x3, 0x7, 0x7, 0x9, 0x5, 0x1, 0xb, 0x6, 0x7, 0xb, 0x81, 0x2, 0x36c, 0x800, 0x3, 0x800, 0x7ff, 0x1, 0x8, 0x7ff, 0x6, 0x9, 0x9, 0xffe0000, 0x10, 0x45, 0xfffffff6, 0x5, 0xfffffeab, 0x7, 0x2, 0x69, 0x7, 0x81, 0x2, 0x6, 0x9, 0xfff, 0x9, 0x3, 0x3aa, 0x7, 0x7f, 0x4, 0x8001, 0x16645508, 0x0, 0x8, 0x5, 0xb8, 0x9, 0x6, 0x4, 0xc, 0x3, 0x4, 0x8, 0x200, 0x8000, 0x3, 0x1, 0x401, 0x7, 0x0, 0x0, 0xe7a6, 0x9, 0xbad449bc, 0x5, 0x1, 0x2, 0x3, 0xffa, 0xe, 0x7, 0xe, 0x5, 0x1, 0x5, 0x7ff, 0x800, 0x2, 0x6, 0x8, 0x102, 0x3c5, 0xc, 0x5, 0x4, 0x1ff, 0x37fb, 0x8]}]]}, {0x64, 0x6, "8eeb0f42c51369ff5723abc46891f64f2a1f64b3267e7c97f4f3d90a0c7d62be724a70b2c3eb7956ab9ea45ccf922446afdaa4f240339bed2c135ceff58dc86310f74505c14874ea0c91ac38bcd5490b5edd4d596ea793c923c098ba71fb7643"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x914, 0x2, [@m_police={0x910, 0x6, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xa3b}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x5, 0xfc5b, 0x5, 0x8, 0x1, 0xa, 0x1, 0x0, 0x4, 0xdf, 0x8000, 0x80000000, 0x0, 0x9, 0x0, 0xce7, 0x10, 0x7e4, 0xb, 0x7, 0x7, 0x1000, 0xb36, 0x10000, 0x9, 0x1, 0x7ff, 0xe, 0x4062, 0x0, 0x4, 0x8001, 0xd9b, 0x5, 0x5, 0x3, 0x6, 0x6, 0x80000001, 0x7be, 0x4, 0x79, 0x6, 0x8, 0x5, 0xffff, 0x4ea, 0x4, 0x0, 0x7f, 0xd702, 0x800, 0x8, 0xf, 0xadb2, 0xa7f0, 0x5, 0x17dca32e, 0x7, 0xfffffffc, 0x8, 0xf, 0xd, 0x9b, 0x0, 0x7, 0x8, 0x5a7b, 0xffff8000, 0x100, 0x200, 0x2, 0x0, 0x6, 0x5, 0xc, 0x7, 0x1, 0x4, 0x7, 0x7, 0x2, 0x5, 0x1, 0xc64f, 0x3, 0x9, 0x20000, 0x5, 0x0, 0x0, 0x9, 0x6, 0x6, 0x8, 0xffff, 0x6e82, 0x8dd0, 0x3, 0x2, 0x4, 0x1, 0x26, 0xa7ce, 0x4, 0x6, 0x4, 0x4, 0xa0000, 0xffffff01, 0xfffff20e, 0x6, 0x2, 0x3, 0x21bb, 0x5, 0x400, 0x7, 0x6, 0xed, 0x7, 0x4, 0x5, 0x6, 0x1ff, 0xfffffff9, 0x5, 0x0, 0x9, 0xf, 0xe, 0xfffffffa, 0xfffffffa, 0x80000000, 0x0, 0x7, 0x482, 0x0, 0xc935, 0x298bd4a6, 0xe, 0x9, 0x8, 0x5, 0x9, 0x5, 0x9e, 0xfff, 0x213, 0x7, 0x9, 0x4, 0x6, 0x2, 0x6cd7778a, 0x4, 0x0, 0x1a, 0x0, 0xfff, 0x1, 0x4, 0x3, 0xbd, 0xffffffff, 0x2, 0xfffffff1, 0x10001, 0x2, 0x0, 0x1, 0x7f, 0xe0, 0x4, 0x2, 0x1000, 0x0, 0x6, 0xe, 0xfffffff8, 0x7, 0xaff0, 0xffffffff, 0x7a96, 0x80000001, 0x4, 0x4, 0x2, 0x9, 0x893, 0x9, 0x5, 0x4, 0x1, 0x7, 0x5, 0x4, 0x7cf, 0x2, 0x2, 0x8000, 0x80000001, 0x87, 0x2, 0x7, 0xfff, 0x2, 0x5, 0x1, 0x9, 0xca8, 0x0, 0x81, 0x9, 0x0, 0x2, 0x3ff, 0x9, 0x101, 0x7fffffff, 0x209e, 0x0, 0x8, 0x0, 0x7, 0x7, 0x1000, 0x28d, 0xfffffffe, 0x0, 0x707, 0x4, 0x0, 0x200, 0x3, 0x2, 0xf, 0x5, 0x100, 0x9, 0x73, 0x0, 0x4, 0x1, 0x10000, 0x7fff, 0x68, 0x2, 0x81, 0x52, 0x200, 0x4, 0x27]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4b68}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfafa, 0x3, 0x23b, 0x8, 0x3, 0x3, 0x532c, 0x6, 0x0, 0x8, 0xa8e, 0x1, 0x81, 0x897, 0x3, 0x1, 0x80, 0x0, 0xf, 0x5, 0x0, 0x8, 0x2e5, 0x9, 0x7, 0x2, 0x6, 0x800, 0xfffffff7, 0x3, 0xb, 0xfffffffb, 0x4, 0x830, 0x1, 0x5, 0x2, 0xf20, 0xb9, 0x8, 0x59c, 0x7, 0xff, 0x2, 0x7ff, 0x1, 0xc5d1, 0x80, 0x2, 0x4, 0x7ff, 0x7, 0x43c, 0x4, 0x8fa3, 0x69565e33, 0x5, 0x9368, 0x2, 0x123a, 0xe, 0x6c7, 0x2, 0x7, 0x4, 0x5, 0x7, 0x5, 0x267, 0xffff, 0x6, 0xb2, 0x6, 0x97b, 0x40, 0x3, 0x7, 0x7, 0x1, 0x1, 0x2, 0x2, 0x1000, 0xfffffff7, 0xf, 0x4, 0x4e, 0x40, 0x4, 0xffff, 0xff, 0xb1a, 0x988, 0x401, 0x2, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0xffffdefe, 0x2, 0x80000000, 0x5, 0x54, 0xe0000, 0x1, 0xe92, 0x2, 0x0, 0x0, 0x1, 0x3, 0xf7a6, 0x0, 0x100, 0x0, 0x10, 0x4, 0x4, 0x2, 0x8, 0x23421d05, 0x1, 0x9, 0xf95e, 0xd0, 0xdbf, 0x0, 0x8, 0x800, 0xffff, 0x5, 0x7, 0xfffffffa, 0x81, 0x7, 0x3, 0x5, 0x40, 0x3, 0xce3, 0x1, 0x4, 0x5, 0x3, 0x8, 0xdd, 0x4, 0x9, 0x6, 0x8, 0x88a, 0x9, 0x50f, 0xffffffff, 0xffffffff, 0x1ff, 0x3, 0xffff, 0x7, 0x400, 0x4, 0x7a, 0x5, 0xff, 0x5, 0x0, 0xed2c, 0xffffffff, 0x4, 0xf6, 0x7, 0x2, 0x8, 0x1, 0x100, 0x1, 0x71, 0x5, 0x3, 0x5, 0x9, 0x59, 0x7, 0x400, 0x6, 0x0, 0x80000003, 0xfffffff8, 0xb, 0x6, 0xaf, 0x400, 0x5, 0x0, 0x1, 0x2, 0xe8d, 0x0, 0x8, 0x600000, 0x3, 0x2, 0x80, 0xa6e, 0x6, 0x6, 0xa17, 0x6, 0x7, 0x1, 0x4, 0x5, 0x8, 0x8, 0x7ff, 0x8, 0x8, 0x2, 0x0, 0x1, 0x7, 0x400, 0x3ff, 0x10001, 0x0, 0x200, 0xfffffffb, 0x1, 0x9, 0x8, 0x7, 0x4, 0x8f, 0xffffffff, 0x2, 0x3, 0x1, 0x8b, 0x8001, 0x0, 0x100, 0x6, 0x8, 0x9, 0x5e9, 0x7, 0xd, 0x5, 0x3, 0xea5a, 0x400, 0x1, 0x6, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5e5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0xffffffffffffffff, 0x800, 0x2, 0x10000, {0x2, 0x2, 0x200, 0x45de, 0xfff, 0x8}, {0x81, 0x0, 0x40, 0x852, 0x1, 0x9}, 0x0, 0x8000, 0x9}}]]}, {0x67, 0x6, "a9d100d777e6c747a5f4009e8d2d861b7cfa0a1ec94cb2dec992da98fd369ece27f1657891fe7fb2d989bd27c10168607ddc0f2932acadd814942e1dddf9a00b04c444a708fac080f1043b1b1b28079419a30d8287fa0c40d10a72cccce1b491f14c19"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x135c}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r5) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x4000000) ptrace$cont(0x9, r1, 0x6, 0x100000000) 15.0199016s ago: executing program 6 (id=2143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000280), &(0x7f0000000440)=@ng={0x4, 0xb, "df5876270a776535fb62ca4f1ba3b7ad928b"}, 0x14, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs$userns(r1, &(0x7f0000000180)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0xa) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@bsdgroups}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x31) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc01}}}]}, 0x38}}, 0x20008094) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x7ffffffc, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0xffffffffffffff0b}]}}]}, 0x3c}}, 0x0) 15.01910854s ago: executing program 8 (id=2144): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000240), 0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22008000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xfffffffa, 0x7d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x9, 0xd}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 15.010092011s ago: executing program 7 (id=2145): add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000003c0)="8a58ae", 0x3, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x2, 0x300) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', '', [{0x20, '\t\t'}, {}]}, 0x8) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000e3874c915e010000000000c492922bffff84013b088b9bcd1f238c913d43d887661e1a58b29543ee3112fbb85c266187114a6fd8740a6882e3c7a081b7fe2e4e84e689d2e2c95e3ce0b3435a983e66ea9210275146f9f23d5ebef7b87af18c4f23afd3c43c958a906e0f2d865e5cd8cdd59d562352d4f289399190dcb34532289083356a72098a8515efb0865cca7fc0fdb85f300709080d0747e2f8b76621a0ab041329c1cace10f3a740451bbdc2f83d87df7623334f892633e65d43d4e6108fb08a7d7c023271c870e391431aafa23e422842ea0b3406ffec7177120d5fd43c593dcc7b66a37f62a5b5470af72f0ba536", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x413a, 0x40, 0x0, 0x0, 0x6, 0x75, 0x6, 0x8, 0x79, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00), &(0x7f0000001c40)=r6}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[], 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") 14.834093933s ago: executing program 8 (id=2148): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x1004040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$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") r5 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) rt_sigqueueinfo(r2, 0x3b, &(0x7f0000000540)={0x0, 0xe, 0xfffffffb}) write$UHID_INPUT(r1, 0x0, 0x0) 11.822416883s ago: executing program 8 (id=2149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@inlinecrypt}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000018000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r10 = open(&(0x7f0000000080)='./file1\x00', 0x64042, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 11.821580503s ago: executing program 7 (id=2150): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000500000000009abf5f0347a67c776d4f328fc9c16d000012000800"/40], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)=r4}, 0xffc2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xc, &(0x7f0000001580)=ANY=[@ANYRESDEC=r0], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) syz_read_part_table(0x5c0, &(0x7f0000000000)="$eJzs27+KJFUUB+BfVXdXdYNLa2KoDZsYuYHxsKOyOywYLIKZoKmJiGAgKFONookamRj4AptMIBgZD6IvIMIwBoJmIgZq4Fyp/jc1YySNqPB9QXHuufeccxuqwwr/b2U+SkbXkuO6rrbx/I9k+dLTSbtYrSebfH/ghQd37t5b3K+aXa5KfuqSetOnfzTJY7vGWWyiL8b58MHR+x99/FaTLt35cZJPky4p7fZqq9p80vzl0r9V2+b8u564tq52j16XhzNdRbeyectGq3TaPmre23v+ycHp8nYflPXQWXM5Pcnh1dN1jm+uo0l+vsikXuy2Nm/T7fX1rmqTUspk0Gb7L5gMpj315XfHWTbrndGgtnc2S147e/7JatADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/nrKxWhzmkWlSJeN+9dkzVbc+NF5nnm3G6/Xvw6L9nByczt959/U6bx688s2rb39/9OP0lySj3Dp6qLTt7tzLaQdV46S+SPLobN/5Zdv2jReH6UWW+ermt4/Xo5Qyv8xPqv75edLluctaAAAAAAAAAAAAAAAAAAAA2NOdu/cW9+vZ9uv6epsvmSbVtQ/cy6+llMOU5kp2luTr81RJfkiphltNMr+RpP2gyWajS0q5Mf3nfhF/x58BAAD//++eW/s=") r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000280)={0xa, 0x6e26, 0x1, @mcast1, 0x8}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0) read(r6, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioperm(0x0, 0x2, 0x2) setuid(0xee01) epoll_create1(0x80000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x1272, &(0x7f0000002880)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) 11.821179713s ago: executing program 5 (id=2151): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 11.746549334s ago: executing program 6 (id=2152): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) 10.699331388s ago: executing program 5 (id=2153): socket$nl_audit(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa0304907801000000000000000000001100000a010100e0000001440c0001ac1414bb4e210000443c0001e0000001ffffffff0000000000000000ac1414000000000000000000000000000000000000000000ac1414bb00000000ac14140000000000"], 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.29635363s ago: executing program 8 (id=2156): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") io_setup(0x5, &(0x7f0000000240)) r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) io_setup(0x6, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpgid(0xffffffffffffffff) setpriority(0x0, r6, 0x79e98a74) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="cdbc4d89b5f89d5a8174c83a579ae8cbec56dafa433a", @ANYRES16=r7, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x4040000}, 0x4810) clock_adjtime(0x0, &(0x7f0000000400)={0x8, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 8.225167701s ago: executing program 6 (id=2157): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r5, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 8.186769171s ago: executing program 5 (id=2158): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000240), 0xc) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22008000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xfffffffa, 0x7d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x9, 0xd}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.948389594s ago: executing program 4 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sigaltstack(0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r8}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.430404411s ago: executing program 6 (id=2160): syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") io_setup(0x5, &(0x7f0000000240)) r0 = inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x11) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0xffffff01) io_setup(0x6, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpgid(0xffffffffffffffff) setpriority(0x0, r6, 0x79e98a74) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="cdbc4d89b5f89d5a8174c83a579ae8cbec56dafa433a", @ANYRES16=r7, @ANYBLOB], 0x198}, 0x1, 0x0, 0x0, 0x4040000}, 0x4810) clock_adjtime(0x0, &(0x7f0000000400)={0x8, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) mkdir(&(0x7f0000000600)='./file0\x00', 0xe8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.313377883s ago: executing program 4 (id=2161): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x1004040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") r5 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) rt_sigqueueinfo(r2, 0x3b, &(0x7f0000000540)={0x0, 0xe, 0xfffffffb}) write$UHID_INPUT(r1, 0x0, 0x0) 4.303040613s ago: executing program 5 (id=2162): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x102) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) chown(&(0x7f0000000280)='./file0\x00', r4, r5) sched_setscheduler(r6, 0x5, &(0x7f0000000240)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x8c01, 0x1) io_setup(0x2, &(0x7f0000000200)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0x929, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r9}, 0x10) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000040)={0x1d, r11}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 4.295101943s ago: executing program 7 (id=2163): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x184) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) unlink(0x0) socket$tipc(0x1e, 0x2, 0x0) 4.200824204s ago: executing program 8 (id=2164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000080000001000000000000000", @ANYRES32=0x1, @ANYBLOB="81ffffffffffffff000760000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000e9ff0000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x6, 0xe8, 0x4, 0x0, 0x8}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffcb, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x3]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000340)='.log\x00', 0x0, 0x80) ppoll(&(0x7f0000000200)=[{r6, 0x580}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x1c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r6, 0x80000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r10, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r10, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) sendto$inet6(r10, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r10, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r10, 0x0, 0xfffffce5, 0x2003, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0xfffffffffffffdaf) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3.166658568s ago: executing program 7 (id=2165): syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000880)="1080", 0x2, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r11}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, r12}, 0xc) 3.127589348s ago: executing program 4 (id=2166): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) read(r5, &(0x7f00000002c0)=""/147, 0x93) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)) 3.00761012s ago: executing program 5 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x42, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000100)={&(0x7f0000000300)=""/193, 0xc1}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, r5, 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) timerfd_create(0x0, 0x0) 809.116979ms ago: executing program 6 (id=2168): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0x6, &(0x7f0000000000)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000002000000020000000000000022000100", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000005000000000000000000000000000000000023e39a057e78b3e1a2e56591d3d047bc96c47e", @ANYRES32=r5, @ANYBLOB], 0x50) 617.369922ms ago: executing program 4 (id=2169): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x508, &(0x7f0000000a00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x80, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x123c, &(0x7f0000000200)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000001440)=""/113, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000002c0)={[{@debug}, {@oldalloc}, {@delalloc}, {@sysvgroups}, {@errors_remount}]}, 0xfb, 0x4a5, &(0x7f0000002a00)="$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") r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPTPEER(r7, 0x5441, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 337.018485ms ago: executing program 7 (id=2170): r0 = socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") fsopen(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x50, r5, 0xd467a000) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) socket$nl_route(0x10, 0x3, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) syslog(0x4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@ipv6_deladdr={0x20, 0x15, 0x4, 0x70bd2d, 0x25dfdbfe, {0xa, 0x78, 0x0, 0xff}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}]}, 0x20}}, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 311.535256ms ago: executing program 4 (id=2171): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x3, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000240)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'xfrm0\x00', 0x0}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendto$packet(r4, &(0x7f00000000c0)="ff", 0x1, 0x4004, &(0x7f0000000200)={0x11, 0x9, r5, 0x1, 0xe0}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x4, 0x10001, 0x9, 0x20800, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000080000000a0000ec5cde63e9dbb36bb9f09db6c1fcce5bd471068c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0100000005000000e27f0000010000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES16=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@access_uid}]}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000087db0000ef0400"/20, @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000200300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x23, &(0x7f0000000bc0)=ANY=[@ANYRES32=r13, @ANYBLOB="0000000000000000b702000083000000bf090000000000005509010000000000950000000000000018300000030000000000000000000000850000e99b0000001811000076d3e51f7b74f73c", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000000b68000006000000000000000600000063ba0000ffffffff18010000756c6c2500000000002020200100010000000000bfa173000000000007010000f8390b8511030000060000a90426a880326f142224bd9347850f00850000000602000018300000050000000000000000000000bf91000000000000b70200732acbd7910d042f2200010000008500000085000000b70000000000000000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x2, 0xfffffffb}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r8, r9, r10, r11, r12, r14, r15, r16, r17], &(0x7f0000000680)=[{0x3, 0x4}], 0x10, 0x4, @void, @value}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 253.098647ms ago: executing program 8 (id=2172): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@min_batch_time}]}, 0x1, 0x4f4, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r4 = open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x12) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$TIOCEXCL(r8, 0x540c) ioctl$sock_netdev_private(r6, 0x8971, &(0x7f00000010c0)="99803939e155fce925f4b101173a") r9 = socket(0x28, 0xa, 0x9e8) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r11, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_emit_ethernet(0x112a, &(0x7f0000002800)={@local, @multicast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "5df51b", 0x10ec, 0x2f, 0x0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x12, 0x2, [], "5802028bf89f8bdd4d484c03f4a15ed3ac53"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x4, 0x8]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8], "5365c7f22def6b93129d12a7cf1db44da6a2df17667d797851d2213e48cf806bd2aba8296aee66b6a3b2ca1e4c0d0442665a57a0d044739392f7058204e33548bfaf01b8a95b11a26d4130cd2e2c9a17a50992bc72a0273e8df5b63bac79b8601425adae13939a4284cdd90dd4ee40f26eae2ee86c6ea5c5462db1ceea2a58ad7eedbe8cdf2a53e202304854ec0e171fe59eaf2bc48f174feaf2523bc8da0b15"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x37, 0x1, 0x1, 0x0, 0x3, 0x2f}, 0x1, {0xa9}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x3, 0x2, 0x0, 0x1, 0x1, 0x6}, 0x2, {0x4, 0x6, 0x2, 0x5, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "c554c7c29d1c7bd3066981531e59877ef990fc7ed7b87716236a17e5cc1f3656458d02a51c63360fe756a292f92f82bc47a8fc9c0db670249eccffe132cc91b4ae879926caeff65292bc47cd39faee2b3c15906ed473fe48e42a25101f99de1480b3676aadb7a167d43e02a4d22354dd8b23c87827f2670f564bb9bd4b4c63342350d5945295c074be47e3fd1c21462f202f26572a364914925c2a79248717b89748ebabfde2796419615c307cf2b7c10fcdca7a36acbdbdf6ca3044d3dbb5848e127ce2b21098ada26a0da074c09a1c8f8e41c7c89233854b9f9317a009e8dbe31b9910eb2e9f1c24118e63f3f07f08aee8f7d5f1761e6c4e359cb0f887e853f5a17ca80507659b91c87b685e7fefb0df36aa39d5a0bb878fdb9eaeced2d6a945d8bb153f2ff7a3a44f40f5bde27d95323b0294d651098a74af49d08165c295595a50cbb9c20417c77de3655eab44e287cfc6e2f54b5bc8fd3ae5b1bb9fb191dd0734dd7bd9b664a33bcaf555932c700c86366b4ee3ff6117d5f6abffe4c6c21ebbf0f6a4c20a0c19e9072b5e738bf129d98c810e0bf5d49a6cf5f691b764cbfcfa3cfb466b28b7c2c14597e8c94c5de54816d6d6568ff752d7ed3c5ad0d4baf25822b7884dcca35ca6f5f4d4eb2b9f77e14e44bcbe26b29484a5e8d69b8a3053612a16593025b2581604386aaa6b6b801166d853ca566a9a71233cdba2eea10215099f995a67b835808ac299ad88338b84d09133f05432c54371fe48b6930ba70cbf521c9b0ad8c8ca0d442a3009253d1ee92499e451e8307da222410830fafdca10b1aefd389695f924bd318d8121d6abeebcad2f7a544862fc86a9296d0a374e9264fe711f61327f8e040b431daa22da850b96f3f0dacfba2096148ce972fd0e2b53cf84f2e7b7ba67efda82a00d6a1a57fead15e7a8d918ca39f8ef273a79c3005671045e8891e1392ef17fe2a0e08d69116f44b30ce1e7d16430c6decd104cb3c48e78be6335547cc060aead5fddbad049aaf05d23ee1564414138204ef04c75a1da7d32e5f97882c10a1dcbab5f79b9554da244b70e828f28bf826202b36cbd64bbcc2e70cbf6a2a02e9363fe6ecd8f404c57175e8265c55e9d4f311746086682a2cc9ef69dd3e4e6bee2d32299e9d487e44f2155785be1ad4e120cec40d62ed452390075fabfe19612c110dee2f5a00227cd6a86cb31aa1d4519e176c35254f3c412cb0c1dc3cb5b0598d94c40e2886705baf8ae3dd12e5dd7e1ec6283ddefc53b8d96942910b0de7992211bae00a301a4d90f6696008ae9559d17f967bae611c0b22cae26bc7d28e53dd2af0a40a5f5a2cdcd5cc27793f5cea311c0a7156ae4ea25a95747acdc27f85d37ea5347b801a78dd9d5392bff7ca42671cc1aceb1740cb4fd760cf640c2b4cd2a49287cce84accf52cd51ee6f13796ee8c7a59c75ffc075590679541a78f20bdf484bca4393ba4bc38148b933fc71024e56569084188d19fa7405785a9a49c9eea8f8944d2341c87e337a42bcbb8249122684c4ff2db80a01796b7c944c58b97d8dfea6af819ea9a39ae71efbbc38016212f4ec94395d8f85a00756f344cace4d6dfb93e488e4194590508ec2131299a48059ff34a4030f93c1794b16588ee0072a816c0289a98d76c712cb33f2e7a98c1fe6bfb251ffdc6fa460bbbebc76d6bfeda4567793403b0674102343265252470afd9ca5a466c12effdb507b9e39ec4d339a2d2100d8daff79116842f1b3e1cf34f97e9a88869a75918fa01bdafe4534dce772cc5f8af35dd68ed63039b2dc07a40d29d33f880a57e3af8b1d60935c0fc9550eade44474823bee4bb84a3fd0d8f095fe8fd10c78aff9d5c47993ab1f612c1027d92e08eb3ce98969b99cd36a18def46e3527a073ae77abfd04c6d94df472a03e194cd0fcc110fcfba553cebbbc31f9bb0a6a4ecd1a6f9189be2a509c00d0df832ce19074ee0806cdb49193fce5937562168754820fe264357581f6e5bc3e692d8619f424640b1d5bf8646a9acd4700af4055c2aa027086f36146b4f7886e1487c1d91f6a633bd50bd904d5584d8340f94a3ca60b472338db7e49bf2b9f87ec8604aa5e5f6f6cd109ae5280264fd0118af35c8e6e6f2889c247bc83d5fd7e359c803e6195010c921a8a7078163f9c96cd838d11b6a183930cff1576858b12e4b31e750d55661a5a4281ec03a41db6dec0f39809eecbcae7ca72b0a776bb2b374d00365fe64ee824d5401eb91ceb7cfac29be6e3066149dfca2c6e69fdb4405bc3f2e2f6f24100661a107d35c1159a0f153ed9c22a033a641773975eae0307fc3d4fc5b5124e6228c486302c9ef25760649bbafb8be8f3806167fe5a82a5de27c2865750d3b58a2520f0f7ca080b4002695b3f23f69ecf88b1a7511ee827cbeeaf31dfff6545ea8e82b09a47160a7c5ba9c01e69a40b6b91c850a3d222c5491625812e55ec9c97b2fbef90e263acf887202a08b9f221e9b7e7623c338750d03d13139ce9053682f4bdb52e6610f4e33de7ee801bd13962c751d600473704e4f20e61c4c8172bb2a7d6335268be8f89af895785363b55426bd6e0bad851d8b7e400c0cc720867dc322abc259277abb4aad2d686d1d477dd893faf3f63eef8d3eec72125d940ddf0201003df4b71a1c16a2e037bec4ed6f08b837ba3da448b6aa9bdf9824d4465f1861d61b267379e99068b0e5b3e650b2427a158324f8ecb037e3a93a4a53874725c39fd3a6872619a4c5de926cbfe4a608729e6c944bf7bab7f1bb62b3be5069bcb2d04750cda192187f91a7fac19d4d6744dac013748e7eaff878b519357ac1138465ae3a0b8b63aac2dacd5b064cf01cc277ce5759ea116260e3a1f2d1dfd3f44b04cccd600ce507f7e69d546ec75bd7556036926ee7f096affc10deb7e0d0f6ea055ac5995ba45dd3c4a07d0103b638e2520f27e07457b0fb434b6e5a6a7274b192960e02822e942d75c4f3ae231f19f79e73ffa8ff6e0512b10381cd2e00af813b02856a28a8fa0725532dc7ac470fc20257a64d683867488a410d1536930320c6f7e48f7fb6a2a9d550270180f4dbcf8ce09292363d6e706c26d428d4d2ff968c0124e3b0ac6c5192076ab0781543c89a867381cb3bc5d3f3fe0190cfeb17b98a71c8b5a5a8ac0bdf579553e206bb23ec5632410e2155ed7bfd091fb7cfd9bfa7dd9a02a9f484e9b4286dc7c4a2d73a044b4654596ddfd3285fca865eff421bd1f46ee81dfa480814d5e15cbed85f1eb016ab5feccbd00b15d683b8cd7043f26f04b7f306bdab22b1e2ab2f6e99fd7be4427cf1eded16a5e6a9ff46ca8ee5e7db602562a00cc9c3abceda8078f5f0eae555ce830f85ffd55744654716425ae54a84d50ef7333c840ab2b095635a85bce14f75f5a867d9e01361d4a072d6b4730728d38f460330fcb0eda4b2795d40713c648d020afe06aeb69c80bd8f54177781d6081d4d70da8bd8d9342b96ad66fa9a72400470ef98de73ffab788f7a1644068f3d8d9de1deb60ba2c2feffd8a35f63c816117c40447ba3f43bebb30a68814f12d9bc3a9e8a06d33fd359d1fa39ff32ccd686b2d1d83e240e7be51efa76670dbad27c7dfe33be75851faf3c6771d08876406692c5ebf37ad88431b67b8b3f6610e44ce1f54b71b300a8110624b51ec272893671b6b623d7cb2825f0822e531a1e5e085598aff16331b04c36e7416db632ba1f74127dad75ae90ba546d30f5a7a2b5db78178de662bbb32ca2eda7bb1bdce3bcff8dd33894e97aa1665a348b17a6d8c1a9f63b9e809062d866bbb916723f0957e7070e74481f480f34ee1ed3074a670f20af1b7c73ba4aa3dc995bb5eb818f077b52938b9f5aa6622c462e91fd1fdc78bd6af6ce2191b757bf9f4c18abacdca5c6053a68f708b8098202f96a47584795c82efa19dbdb05ccd08ec9e561d1b50fe9990ee63db758a82cc190b5f057b097231f337a459ebef40a52b310fd713cada833c227bc7725ef9a5410fc52413be61f4ed1bb5b003c7638619f77959851e26e47e2b76ebc206fd0dfe45cfc6c85232af6a06a4c4592fcd8c7bc22ae6072a766256bc8413dc80f4b78f32352251ac809bc2a827356fb5f82b38be10c53029297481293ccf664709ce6e006cfc3dfea7a9aa0951b4018e94b63d618dd9498b6aeb0ac22488fd73d674ca39476a791b954a0caba3312afb10535c8f438c5cd7695207472c0d8f150e6378ea63ab080863ab7e6ae4e4fe009bcb2031fd1730584d0875b1a2006323a2e741243417f2c12a8f6f1eb569bcb2156c27435ded45a5283cecda0b65c988520e8065bcb79ff0280b424e7cf61d2ff5593cc2b38306c2186cbfdb779e1073e6e10a6c9902b0eda8f76f9ddca7f7625b83da384c46852b83653ca75bf96ebef70a0f2ee9a6f548c80f85eb5e74215f26a1acf2729c2e338050324c468c82aa1e74f3ec9dd70dce0a599e3d15d60ed0476cd597ba9928bbd9df5bf956b0788b1cb1de2e201f0afe497d2b9c5a475076aa55205a289490a519120ce88604376096b69b6f0372b9cee4f5eb21f63f8dc1e14a8aa59c730b715dbc25e4058c3ccf42e362b70a6fe91358e1306e72e7405a44e8de29a832e7d70041de08b87b8f15663e14d2ac6aa34bf8b1c15ebba92eea8e5e78a84724ad70319b76b3a0a9eab000f75a57b7045d38b01af4b315b0100652e7cadf1dd5a716a55144fb43265d40f358425c93b14a9199c7d8a2f493138c6ddba3942667cc0d4dfb9efe0e68288f828b1a7fadd1c0e2ad7206d9640b553bc7e4a9664c04f7f3e259fee8c7d4ffa32c3fad0cf8eda5a1657488d6a5327bc2504aa602c4b0a2e852477c190587340875887b9abccd5889b0c7fb11a95977dc1236a95788a63d30e3c7a9a2881c4d4e83a89bf020f1e7c3548318b0acdf3404ed1279c6550b9d30313ab16f34d2bf8179717dc0c7ee208c0c1f654d19744135fa7aa2737c3a981387d90b6c3dd92f4a29b2e94b26e5318e81ab4a30bcb90a23cba3a0a1abf6f60e360274e6e6b91d045e5898c013c14043bb3e461ae5caa5fa035d879de413dbc68ab86221c0a5c61f69cad22e8b25dd0ac224bb29e04226f80b148a4073c40998990e797ba258b6b673aeffd7ac1928f79dbd1a5368ca1a3dfcaace776cf377e81f994c123f2e94a84a4749651debf41ffe25a77adfe403f4fd69016190feb0bd0d254fff75b5a662a45ab63f05759e4adfc1e458c1fce98f8b50c1c8e142f8dbefec6e560a18176fe7216492fe7dee064069b30816a97c73f0309a0d8c4e24671387d05f3c2f8a5279e1fe169e63daa78acf78c74543a307ed4e09375af0aafa6c6819bcfd92005ee6d9a9c2928639e290b37665b38e4fd99f4a0c12e0b68b4aa18d93d035f41aa0d96712a41465c4da0421236a25737aff4fe9fe35331f329d00e1224ba6219ae8de6515920ccd2633a8ba26d40901ff0a0848f47a6072fddd4ca02c74a56f588c3720e636ab170f014a5b6c3425d1424415ec5647fc598a5a931471bbfd537a1b355702867bca2b2703144d62c24f34e6901526673bc5029a714320eba03c25f74d3fc59512da904a85e6c743928941133d47efdda6d282eb467ec0f2c1e98b6c1ba5cf6e99a124a64df5c6d3626054df549087b097f570d1603e517bdc154da8b29d3c93fb32ef8adc9b5e7592b7f2da9d1fe4c2c7404b2def06e97d4e7a4b198f69e9c505b27a5ac1677ac315756f129490313168d0b71caa3a56"}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x436, 0xe36, 0x886, 0xff6]}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 140.976768ms ago: executing program 5 (id=2173): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff}, 0x6) io_setup(0x4, &(0x7f0000000300)=0x0) io_submit(r1, 0x0, &(0x7f0000000340)) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000080)=0x1, 0x4) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r10) io_setup(0x2278, &(0x7f0000000180)) io_submit(r10, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = eventfd(0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000280)={r11, 0x445a, 0x0, r11}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f00000001c0)={r11, 0x17, 0x2, r11}) 0s ago: executing program 4 (id=2174): openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000000240), 0xc) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22008000, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x8, 0xfffffffa, 0x7d, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x9, 0xd}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 78680.888:1524): avc: denied { mount } for pid=6517 comm="syz.6.1372" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 843.891106][ T28] audit: type=1400 audit(1747678680.928:1525): avc: denied { unmount } for pid=3828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 845.178905][ T6558] overlayfs: failed to clone upperpath [ 846.147915][ T28] audit: type=1400 audit(1747678681.658:1526): avc: denied { connect } for pid=6547 comm="syz.6.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 846.562248][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1383'. [ 846.593939][ T6564] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 846.613790][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 846.623221][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 847.496901][ T6575] overlayfs: failed to clone upperpath [ 848.542022][ T6581] overlayfs: missing 'lowerdir' [ 849.353886][ T6583] syz.4.1387[6583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.355183][ T6583] syz.4.1387[6583] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.417563][ T6585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1388'. [ 849.499386][ T6588] syz.6.1389[6588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.499492][ T6588] syz.6.1389[6588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.511302][ T6589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6589 comm=syz.2.1388 [ 850.523459][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1387'. [ 851.203979][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1387'. [ 856.461024][ T6614] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1393'. [ 856.920450][ T6619] loop6: detected capacity change from 0 to 16 [ 856.928019][ T6619] erofs: (device loop6): mounted with root inode @ nid 36. [ 857.220953][ T1341] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 857.420821][ T1341] usb 7-1: Using ep0 maxpacket: 16 [ 857.427970][ T1341] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.526411][ T1341] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.627636][ T1341] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 857.895160][ T1341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.268538][ T28] audit: type=1400 audit(1747678695.118:1527): avc: denied { bind } for pid=6621 comm="syz.2.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 858.497739][ T1341] usb 7-1: config 0 descriptor?? [ 858.521238][ T28] audit: type=1400 audit(1747678695.128:1528): avc: denied { write } for pid=6621 comm="syz.2.1396" path="socket:[34847]" dev="sockfs" ino=34847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 858.589533][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 858.601667][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 859.024477][ T1341] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0003/input/input13 [ 859.247769][ T28] audit: type=1400 audit(1747678696.338:1529): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1594 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 859.253206][ T1341] appleir 0003:05AC:8241.0003: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 859.336400][ T28] audit: type=1400 audit(1747678696.338:1530): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1594 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 859.427225][ T28] audit: type=1400 audit(1747678696.338:1531): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1594 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 859.571415][ T28] audit: type=1400 audit(1747678696.658:1532): avc: denied { bind } for pid=6607 comm="syz.6.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 859.610864][ T28] audit: type=1400 audit(1747678696.658:1533): avc: denied { write } for pid=6607 comm="syz.6.1394" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 859.955303][ T28] audit: type=1400 audit(1747678696.658:1534): avc: denied { ioctl } for pid=6607 comm="syz.6.1394" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 859.995464][ T28] audit: type=1400 audit(1747678696.698:1535): avc: denied { mounton } for pid=6635 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 860.136167][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.151583][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.167568][ T6635] device bridge_slave_0 entered promiscuous mode [ 860.182720][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.198364][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.260931][ T6635] device bridge_slave_1 entered promiscuous mode [ 860.890940][ T6644] overlayfs: missing 'lowerdir' [ 861.232225][ T6647] serio: Serial port ptm0 [ 861.310549][ T5471] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 861.332829][ T6647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 861.600642][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 861.615980][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 861.631991][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 861.640537][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 861.649020][ T567] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 861.657294][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.664483][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.673234][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 861.681879][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 861.690706][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.697805][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.715627][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 861.723675][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 861.732488][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 861.748703][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 861.763460][ T6635] device veth0_vlan entered promiscuous mode [ 861.770109][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.779312][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.788088][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 861.803502][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 861.813561][ T6635] device veth1_macvtap entered promiscuous mode [ 861.826077][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 861.847351][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 861.855732][ T567] usb 3-1: Using ep0 maxpacket: 16 [ 861.862576][ T567] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 861.871582][ T28] audit: type=1400 audit(1747678698.968:1536): avc: denied { mounton } for pid=6635 comm="syz-executor" path="/root/syzkaller.0Lb7Lu/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 861.876452][ T567] usb 3-1: config 0 has no interface number 0 [ 861.919174][ T6660] loop5: detected capacity change from 0 to 16 [ 861.927647][ T567] usb 3-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 861.937639][ T567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.946284][ T567] usb 3-1: Product: syz [ 861.950987][ T567] usb 3-1: Manufacturer: syz [ 861.955714][ T567] usb 3-1: SerialNumber: syz [ 861.961292][ T6660] erofs: (device loop5): mounted with root inode @ nid 36. [ 861.988411][ T567] usb 3-1: config 0 descriptor?? [ 862.510841][ T6663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 862.521151][ T6663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 862.531162][ T6663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 862.540668][ T6663] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=46 [ 863.385452][ T306] usb 7-1: USB disconnect, device number 2 [ 863.475741][ T567] usb 3-1: USB disconnect, device number 8 [ 863.494326][ T6670] syz.6.1405[6670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 863.494406][ T6670] syz.6.1405[6670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 866.200030][ T6680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6680 comm=syz.8.1407 [ 869.162571][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 869.180415][ T6706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1416'. [ 870.826375][ T6715] overlayfs: failed to clone upperpath [ 872.290883][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 872.290900][ T28] audit: type=1400 audit(1747678709.378:1543): avc: denied { create } for pid=6729 comm="syz.5.1420" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 872.315832][ T6731] loop5: detected capacity change from 0 to 8192 [ 873.354387][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1421'. [ 873.451590][ T6744] overlayfs: filesystem on './file0' not supported [ 874.308859][ T6742] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1420'. [ 874.335707][ T28] audit: type=1400 audit(1747678711.368:1544): avc: denied { relabelto } for pid=6729 comm="syz.5.1420" name="4" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 874.864417][ T28] audit: type=1400 audit(1747678711.368:1545): avc: denied { associate } for pid=6729 comm="syz.5.1420" name="4" dev="tmpfs" ino=49 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 874.913860][ T28] audit: type=1400 audit(1747678711.408:1546): avc: denied { ioctl } for pid=6729 comm="syz.5.1420" path="socket:[36124]" dev="sockfs" ino=36124 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 875.040345][ T28] audit: type=1400 audit(1747678711.878:1547): avc: denied { write } for pid=6635 comm="syz-executor" name="4" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 875.062662][ T6754] loop5: detected capacity change from 0 to 2048 [ 875.075768][ T28] audit: type=1400 audit(1747678711.878:1548): avc: denied { remove_name } for pid=6635 comm="syz-executor" name="file1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 875.085409][ T6756] fuse: Bad value for 'group_id' [ 875.261867][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1422'. [ 875.272992][ T6760] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1424'. [ 875.304666][ T6760] device gretap0 entered promiscuous mode [ 875.956683][ T6759] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1424'. [ 875.966030][ T6759] 0XD: renamed from gretap0 [ 875.972574][ T6759] device 00XD left promiscuous mode [ 875.985914][ T3665] tipc: Left network mode [ 876.039989][ T28] audit: type=1400 audit(1747678711.888:1549): avc: denied { rmdir } for pid=6635 comm="syz-executor" name="4" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 876.117749][ T6754] loop5: p1 < > p3 [ 876.131713][ T6754] loop5: p3 size 134217728 extends beyond EOD, truncated [ 876.407222][ T28] audit: type=1400 audit(1747678712.208:1550): avc: denied { shutdown } for pid=6735 comm="syz.2.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 876.550251][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 876.550267][ T6685] udevd[6685]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 879.135747][ T6779] loop6: detected capacity change from 0 to 128 [ 879.157154][ T6779] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 879.166448][ T6779] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 880.516333][ T28] audit: type=1400 audit(1747678717.178:1551): avc: denied { name_bind } for pid=6777 comm="syz.6.1431" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 880.563047][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 881.098611][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 881.108690][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1433'. [ 881.244649][ T6798] overlayfs: failed to resolve './file0': -2 [ 881.422272][ T28] audit: type=1400 audit(1747678718.398:1552): avc: denied { map } for pid=6793 comm="syz.5.1435" path="socket:[35133]" dev="sockfs" ino=35133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 881.923312][ T6805] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1438'. [ 882.541384][ T6814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6814 comm=syz.5.1438 [ 882.545507][ T28] audit: type=1400 audit(1747678718.398:1553): avc: denied { accept } for pid=6793 comm="syz.5.1435" path="socket:[35133]" dev="sockfs" ino=35133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 882.856296][ T6815] loop5: detected capacity change from 0 to 128 [ 882.871643][ T3665] device veth1_macvtap left promiscuous mode [ 882.878819][ T3665] device veth0_vlan left promiscuous mode [ 883.467116][ T6822] overlayfs: failed to clone upperpath [ 884.363825][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1442'. [ 884.411004][ T6834] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 884.896043][ T6836] device lo entered promiscuous mode [ 885.021903][ T6842] loop6: detected capacity change from 0 to 1024 [ 885.028608][ T6836] device tunl0 entered promiscuous mode [ 885.030052][ T361] bio_check_eod: 18 callbacks suppressed [ 885.030070][ T361] kworker/u4:4: attempt to access beyond end of device [ 885.030070][ T361] loop5: rw=1, sector=145, nr_sectors = 95 limit=128 [ 885.036591][ T6842] ext4: Unknown parameter 'uid<00000000000000060929' [ 885.060302][ T6836] device gre0 entered promiscuous mode [ 885.074713][ T6836] device gretap0 entered promiscuous mode [ 885.082327][ T6836] device erspan0 entered promiscuous mode [ 885.089036][ T6836] device ip_vti0 entered promiscuous mode [ 885.096111][ T6836] device ip6_vti0 entered promiscuous mode [ 885.103088][ T6836] device sit0 entered promiscuous mode [ 885.109943][ T6836] device ip6tnl0 entered promiscuous mode [ 885.126267][ T6836] device ip6gre0 entered promiscuous mode [ 885.136738][ T6836] bridge0: port 3(syz_tun) entered disabled state [ 885.143919][ T6836] device ip6gretap0 entered promiscuous mode [ 885.151711][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.159187][ T6836] device bridge0 entered promiscuous mode [ 885.167127][ T6836] device vcan0 entered promiscuous mode [ 885.173534][ T6836] device dummy0 entered promiscuous mode [ 885.181447][ T6836] device veth0 entered promiscuous mode [ 885.212179][ T6836] device veth1 entered promiscuous mode [ 885.228652][ T6836] device wg0 entered promiscuous mode [ 885.236011][ T6836] device wg1 entered promiscuous mode [ 885.242742][ T6836] device wg2 entered promiscuous mode [ 885.249299][ T6836] device veth0_to_bridge entered promiscuous mode [ 885.256606][ T6836] device veth1_to_bridge entered promiscuous mode [ 885.264396][ T6836] device veth0_to_bond entered promiscuous mode [ 885.271398][ T6836] device bond_slave_0 entered promiscuous mode [ 885.277805][ T6836] device veth1_to_bond entered promiscuous mode [ 885.356428][ T6850] loop6: detected capacity change from 0 to 512 [ 885.373484][ T6836] device bond_slave_1 entered promiscuous mode [ 885.380547][ T6836] device veth0_to_team entered promiscuous mode [ 885.390381][ T6836] device team_slave_0 entered promiscuous mode [ 885.398446][ T6836] device veth1_to_team entered promiscuous mode [ 885.408128][ T6836] device team_slave_1 entered promiscuous mode [ 885.691128][ T6850] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 885.702505][ T6850] EXT4-fs (loop6): invalid journal inode [ 885.708370][ T6850] EXT4-fs (loop6): can't get journal size [ 885.767367][ T6836] device veth0_to_batadv entered promiscuous mode [ 885.781767][ T6850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 885.790237][ T6850] System zones: 1-12, 13-13 [ 885.816763][ T6850] EXT4-fs (loop6): 1 truncate cleaned up [ 885.822576][ T6850] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 885.963805][ T6836] device batadv_slave_0 entered promiscuous mode [ 885.987397][ T6836] device veth1_to_batadv entered promiscuous mode [ 886.005233][ T6836] device batadv_slave_1 entered promiscuous mode [ 886.505762][ T6836] device xfrm0 entered promiscuous mode [ 886.512514][ T6836] device veth0_to_hsr entered promiscuous mode [ 886.519743][ T6836] device hsr_slave_0 entered promiscuous mode [ 886.527150][ T6836] device veth1_to_hsr entered promiscuous mode [ 886.534397][ T6836] device hsr_slave_1 entered promiscuous mode [ 886.541237][ T6836] device veth1_virt_wifi entered promiscuous mode [ 886.548451][ T6836] device veth0_virt_wifi entered promiscuous mode [ 886.555696][ T6836] device veth1_vlan entered promiscuous mode [ 886.563411][ T6836] device veth0_macvtap entered promiscuous mode [ 886.570344][ T6836] device macsec0 entered promiscuous mode [ 886.576956][ T6836] device syztnl2 entered promiscuous mode [ 886.583163][ T6836] device bridge1 entered promiscuous mode [ 886.589581][ T6836] device bridge2 entered promiscuous mode [ 886.595549][ T6836] device bridge3 entered promiscuous mode [ 886.602236][ T6836] device bridge4 entered promiscuous mode [ 886.955584][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1446'. [ 887.109469][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 888.805069][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1449'. [ 888.820370][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1449'. [ 889.135912][ T6875] overlayfs: failed to clone lowerpath [ 889.141546][ T28] audit: type=1400 audit(1747678726.228:1554): avc: denied { mount } for pid=6874 comm="syz.4.1451" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 891.187388][ T6883] loop5: detected capacity change from 0 to 256 [ 891.383005][ T6885] overlayfs: unrecognized mount option "uuid=auto:/" or missing value [ 891.653988][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1450'. [ 891.666139][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'. [ 893.547056][ T6895] loop5: detected capacity change from 0 to 512 [ 894.566403][ T6895] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 895.027335][ T6895] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.044367][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 895.056166][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1458'. [ 895.067870][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1457'. [ 895.282020][ T6912] overlayfs: missing 'lowerdir' [ 895.288722][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1458'. [ 896.680383][ T28] audit: type=1400 audit(1747678733.768:1555): avc: denied { write } for pid=6915 comm="syz.2.1461" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 897.329683][ T6927] loop6: detected capacity change from 0 to 512 [ 897.416532][ T6926] netlink: 'syz.4.1460': attribute type 13 has an invalid length. [ 897.510500][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.518081][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.809791][ T28] audit: type=1400 audit(1747678734.128:1556): avc: denied { bind } for pid=6915 comm="syz.2.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 897.856737][ T28] audit: type=1400 audit(1747678734.138:1557): avc: denied { name_bind } for pid=6915 comm="syz.2.1461" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 897.879077][ T28] audit: type=1400 audit(1747678734.148:1558): avc: denied { node_bind } for pid=6915 comm="syz.2.1461" saddr=172.20.20.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 897.904796][ T28] audit: type=1400 audit(1747678734.408:1559): avc: denied { mounton } for pid=6919 comm="syz.6.1462" path="/proc/576/task" dev="proc" ino=36333 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 898.165567][ T6936] overlayfs: failed to clone upperpath [ 899.739596][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1463'. [ 900.660781][ T28] audit: type=1326 audit(1747678737.738:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01758e969 code=0x7ffc0000 [ 900.750660][ T28] audit: type=1326 audit(1747678737.738:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01758e969 code=0x7ffc0000 [ 900.815978][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 900.961401][ T28] audit: type=1326 audit(1747678737.738:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd01758e969 code=0x7ffc0000 [ 901.077531][ T28] audit: type=1326 audit(1747678737.738:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01758e969 code=0x7ffc0000 [ 901.101580][ T28] audit: type=1326 audit(1747678737.738:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6943 comm="syz.4.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd01758e969 code=0x7ffc0000 [ 901.945915][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 902.136503][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 904.423403][ T6969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1470'. [ 904.433409][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1470'. [ 904.532503][ T6978] loop5: detected capacity change from 0 to 512 [ 904.798820][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1473'. [ 905.156275][ T6988] IPv6: sit1: Disabled Multicast RS [ 905.765955][ T6993] overlayfs: failed to resolve './file1': -2 [ 905.775674][ T6978] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 905.794871][ T6978] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 907.487993][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 907.501242][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 907.829266][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 907.929596][ T7015] loop5: detected capacity change from 0 to 512 [ 907.937086][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1481'. [ 907.959839][ T7015] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 907.971549][ T7015] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.021847][ T7020] overlayfs: failed to clone upperpath [ 908.859657][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 908.882466][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 910.635055][ T7046] overlayfs: missing 'lowerdir' [ 911.243870][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1484'. [ 911.252951][ T7048] 8021q: VLANs not supported on ip6gre0 [ 911.705715][ T7051] overlayfs: failed to resolve './file1': -2 [ 912.204292][ T7059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 912.800883][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 913.331927][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 917.490388][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 917.626269][ T28] audit: type=1400 audit(1747678754.578:1608): avc: denied { ioctl } for pid=7091 comm="syz.5.1498" path="socket:[36501]" dev="sockfs" ino=36501 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 918.959927][ T7096] loop5: detected capacity change from 0 to 512 [ 918.971651][ T7096] EXT4-fs: Ignoring removed i_version option [ 918.978116][ T7096] EXT4-fs: Ignoring removed mblk_io_submit option [ 919.039490][ T7096] EXT4-fs (loop5): Test dummy encryption mode enabled [ 922.291211][ T7096] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1498: inode #13: comm syz.5.1498: iget: illegal inode # [ 922.305506][ T7096] EXT4-fs (loop5): Remounting filesystem read-only [ 922.312138][ T7096] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1498: couldn't read orphan inode 13 (err -117) [ 922.418133][ T7096] EXT4-fs (loop5): Remounting filesystem read-only [ 922.424797][ T7096] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 922.518309][ T7106] overlayfs: failed to resolve './file1': -2 [ 923.750164][ T7099] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set [ 923.861340][ T7099] EXT4-fs (loop5): Remounting filesystem read-only [ 923.883566][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 924.775537][ T7121] loop5: detected capacity change from 0 to 512 [ 924.817979][ T28] audit: type=1400 audit(1747678761.908:1609): avc: denied { unmount } for pid=3828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 924.961393][ T7129] bridge0: port 4(macsec1) entered blocking state [ 924.967897][ T7129] bridge0: port 4(macsec1) entered disabled state [ 925.079047][ T7121] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 925.098377][ T7121] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 925.853259][ T4541] tipc: Left network mode [ 925.861958][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 925.881736][ T28] audit: type=1400 audit(1747678762.978:1610): avc: denied { connect } for pid=7141 comm="syz.8.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 927.096050][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 927.159463][ T7157] loop6: detected capacity change from 0 to 256 [ 927.212477][ T7157] FAT-fs (loop6): Directory bread(block 64) failed [ 927.219170][ T7157] FAT-fs (loop6): Directory bread(block 65) failed [ 927.226013][ T7157] FAT-fs (loop6): Directory bread(block 66) failed [ 927.232644][ T7157] FAT-fs (loop6): Directory bread(block 67) failed [ 927.239464][ T7157] FAT-fs (loop6): Directory bread(block 68) failed [ 927.246100][ T7157] FAT-fs (loop6): Directory bread(block 69) failed [ 927.252918][ T7157] FAT-fs (loop6): Directory bread(block 70) failed [ 927.259540][ T7157] FAT-fs (loop6): Directory bread(block 71) failed [ 927.266432][ T7157] FAT-fs (loop6): Directory bread(block 72) failed [ 927.273072][ T7157] FAT-fs (loop6): Directory bread(block 73) failed [ 927.531272][ T28] audit: type=1400 audit(1747678763.098:1611): avc: denied { listen } for pid=7140 comm="syz.4.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 927.543028][ T7159] loop5: detected capacity change from 0 to 512 [ 927.561272][ T7159] EXT4-fs (loop5): Test dummy encryption mode enabled [ 928.185736][ T7159] EXT4-fs error (device loop5): __ext4_iget:5057: inode #11: block 1: comm syz.5.1511: invalid block [ 928.196989][ T7159] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1511: couldn't read orphan inode 11 (err -117) [ 928.210863][ T7159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 928.376306][ T7168] overlayfs: failed to clone upperpath [ 928.421507][ T7170] loop6: detected capacity change from 0 to 512 [ 928.452779][ T7170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 928.481206][ T7170] System zones: 0-2, 18-18, 34-35 [ 928.596057][ T7170] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 928.767061][ T7175] device wg2 left promiscuous mode [ 928.772543][ T7176] netlink: 'syz.8.1514': attribute type 13 has an invalid length. [ 928.800967][ T7170] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.837198][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.949471][ T7146] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.957110][ T7146] device bridge_slave_0 entered promiscuous mode [ 928.970802][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.984127][ T7146] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.550592][ T28] audit: type=1400 audit(1747678766.638:1612): avc: denied { associate } for pid=7169 comm="syz.6.1515" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 929.596329][ T7146] device bridge_slave_1 entered promiscuous mode [ 929.625449][ T28] audit: type=1400 audit(1747678766.638:1613): avc: denied { lock } for pid=7169 comm="syz.6.1515" path="socket:[35673]" dev="sockfs" ino=35673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 929.672929][ T28] audit: type=1400 audit(1747678766.688:1614): avc: denied { name_bind } for pid=7180 comm="syz.8.1516" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 929.773624][ T28] audit: type=1400 audit(1747678766.868:1615): avc: denied { unmount } for pid=3828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 929.796173][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 931.395567][ T7202] loop6: detected capacity change from 0 to 512 [ 931.470239][ T7197] bridge0: port 4(macsec1) entered blocking state [ 931.476750][ T7197] bridge0: port 4(macsec1) entered disabled state [ 931.590217][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 931.598867][ T7202] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 931.608437][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 931.615802][ T7202] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 931.648036][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 931.656924][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 931.665232][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.672323][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.679924][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 931.688755][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 931.714031][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.721122][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.205577][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 932.343716][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1523'. [ 932.364908][ T7212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1522'. [ 932.380670][ T7214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1523'. [ 932.395251][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 932.417033][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 932.439975][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 932.463943][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 932.491087][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 932.510250][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 932.537736][ T7146] device veth0_vlan entered promiscuous mode [ 932.548981][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 932.563641][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 932.598748][ T7146] device veth1_macvtap entered promiscuous mode [ 932.732900][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 932.744741][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 932.765451][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 932.811466][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 932.892938][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 933.099320][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 933.120411][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 933.174757][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 933.202756][ T3947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 933.779815][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 934.005565][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 935.191022][ T7242] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1529'. [ 936.037322][ T7247] netlink: 'syz.1.1528': attribute type 13 has an invalid length. [ 936.081408][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.088693][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.324170][ T7268] bridge0: port 3(macsec1) entered blocking state [ 938.330683][ T7268] bridge0: port 3(macsec1) entered disabled state [ 939.212646][ T7274] syz.6.1537[7274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 939.212729][ T7274] syz.6.1537[7274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 940.832484][ T7276] overlayfs: failed to clone upperpath [ 942.577063][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1538'. [ 942.586488][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1538'. [ 943.370007][ T7301] overlayfs: missing 'lowerdir' [ 943.538855][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1541'. [ 943.539134][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1541'. [ 945.449083][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1543'. [ 945.458556][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1543'. [ 946.526407][ T7323] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 946.535823][ T7323] FAT-fs (loop13): unable to read boot sector [ 946.630784][ T28] audit: type=1400 audit(1747678783.608:1616): avc: denied { create } for pid=7316 comm="syz.6.1546" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.940502][ T28] audit: type=1400 audit(1747678783.618:1617): avc: denied { mounton } for pid=7316 comm="syz.6.1546" path="/160/file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.964380][ T28] audit: type=1400 audit(1747678783.968:1618): avc: denied { unlink } for pid=3828 comm="syz-executor" name="file0" dev="tmpfs" ino=997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.975743][ T7330] bridge0: port 4(macsec1) entered blocking state [ 946.993534][ T7330] bridge0: port 4(macsec1) entered disabled state [ 947.048163][ T7329] loop6: detected capacity change from 0 to 16 [ 947.057783][ T7329] erofs: (device loop6): mounted with root inode @ nid 36. [ 947.589052][ T7339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 947.599485][ T7339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 947.609521][ T7339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 947.619116][ T7339] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=46 [ 948.066491][ T7340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 948.076578][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1558'. [ 948.583348][ T7345] loop6: detected capacity change from 0 to 256 [ 948.621472][ T7345] exfat: Deprecated parameter 'namecase' [ 948.644116][ T7345] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 948.802537][ T28] audit: type=1400 audit(1747678785.898:1619): avc: denied { read write } for pid=7349 comm="syz.5.1555" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 949.140876][ T7353] loop5: detected capacity change from 0 to 512 [ 949.151373][ T28] audit: type=1400 audit(1747678785.968:1620): avc: denied { open } for pid=7349 comm="syz.5.1555" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 949.185275][ T7353] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 950.585156][ T28] audit: type=1400 audit(1747678786.038:1621): avc: denied { ioctl } for pid=7349 comm="syz.5.1555" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 950.647867][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 950.660494][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1557'. [ 950.897326][ T28] audit: type=1400 audit(1747678786.348:1622): avc: denied { write } for pid=7344 comm="syz.6.1553" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.067232][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 951.135436][ T7369] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 951.395830][ T28] audit: type=1400 audit(1747678786.358:1623): avc: denied { add_name } for pid=7344 comm="syz.6.1553" name="blkio.throttle.io_serviced" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 951.679750][ T28] audit: type=1400 audit(1747678786.358:1624): avc: denied { associate } for pid=7344 comm="syz.6.1553" name="blkio.throttle.io_serviced" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 951.811655][ T7353] EXT4-fs: error -4 creating inode table initialization thread [ 951.859939][ T28] audit: type=1400 audit(1747678787.638:1625): avc: denied { read append open } for pid=7344 comm="syz.6.1553" path="/162/file0/blkio.throttle.io_serviced" dev="loop6" ino=1048667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 951.973589][ T7379] 9pnet_fd: Insufficient options for proto=fd [ 952.184913][ T7383] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1560'. [ 952.194332][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1560'. [ 952.804777][ T7353] EXT4-fs (loop5): mount failed [ 952.977575][ T7389] loop6: detected capacity change from 0 to 512 [ 953.019450][ T7387] bridge0: port 3(macsec1) entered blocking state [ 953.025956][ T7387] bridge0: port 3(macsec1) entered disabled state [ 953.049503][ T7389] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 953.063014][ T7389] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 955.892644][ T7405] loop5: detected capacity change from 0 to 512 [ 955.932119][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 957.314374][ T7423] netlink: 'syz.4.1569': attribute type 1 has an invalid length. [ 957.347299][ T28] audit: type=1400 audit(1747678794.338:1626): avc: denied { setopt } for pid=7415 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 957.490908][ T28] audit: type=1400 audit(1747678794.348:1627): avc: denied { map } for pid=7415 comm="syz.4.1569" path="socket:[37327]" dev="sockfs" ino=37327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 957.514342][ T28] audit: type=1400 audit(1747678794.348:1628): avc: denied { read } for pid=7415 comm="syz.4.1569" path="socket:[37327]" dev="sockfs" ino=37327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 957.549303][ T28] audit: type=1400 audit(1747678794.358:1629): avc: denied { create } for pid=7415 comm="syz.4.1569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 957.553268][ T7429] netlink: 'syz.8.1571': attribute type 3 has an invalid length. [ 957.591008][ T28] audit: type=1400 audit(1747678794.688:1630): avc: denied { bind } for pid=7425 comm="syz.8.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 957.613051][ T28] audit: type=1400 audit(1747678794.708:1631): avc: denied { listen } for pid=7425 comm="syz.8.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 957.633180][ T28] audit: type=1400 audit(1747678794.708:1632): avc: denied { accept } for pid=7425 comm="syz.8.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 957.734444][ T7430] IPv6: sit1: Disabled Multicast RS [ 958.059623][ T28] audit: type=1400 audit(1747678795.148:1633): avc: denied { write } for pid=7425 comm="syz.8.1571" path="socket:[37357]" dev="sockfs" ino=37357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 958.394914][ T7438] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 958.441185][ T7438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 958.915050][ T7446] I/O error, dev loop17, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 958.925070][ T7446] EXT4-fs (loop17): unable to read superblock [ 959.992165][ T7452] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 960.001564][ T7452] FAT-fs (loop11): unable to read boot sector [ 960.234185][ T7465] overlayfs: failed to resolve './file1': -2 [ 960.548413][ T7470] loop5: detected capacity change from 0 to 512 [ 960.561322][ T28] audit: type=1400 audit(1747678797.598:1634): avc: denied { ioctl } for pid=7463 comm="syz.5.1581" path="socket:[37390]" dev="sockfs" ino=37390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 960.856036][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1581: inode #1: comm syz.5.1581: iget: illegal inode # [ 960.870203][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1581: error while reading EA inode 1 err=-117 [ 960.884028][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1581: inode #1: comm syz.5.1581: iget: illegal inode # [ 960.899477][ T7470] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1581: error while reading EA inode 1 err=-117 [ 960.913543][ T7470] EXT4-fs (loop5): 1 orphan inode deleted [ 960.919369][ T7470] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 963.176732][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 963.202556][ T28] audit: type=1400 audit(1747678798.098:1635): avc: denied { write } for pid=7463 comm="syz.5.1581" name="ptype" dev="proc" ino=4026532675 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 963.242853][ T7484] xt_hashlimit: size too large, truncated to 1048576 [ 963.610765][ T28] audit: type=1400 audit(1747678800.678:1636): avc: denied { ioctl } for pid=7459 comm="syz.4.1580" path="socket:[37942]" dev="sockfs" ino=37942 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 964.365277][ T7501] loop6: detected capacity change from 0 to 16 [ 964.441769][ T7501] erofs: (device loop6): mounted with root inode @ nid 36. [ 964.479363][ T7501] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 964.490125][ T7501] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851] [ 964.501157][ T7501] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 964.932570][ T7510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 965.119156][ T7511] overlayfs: failed to clone upperpath [ 965.225173][ T7515] loop6: detected capacity change from 0 to 512 [ 965.270553][ T7515] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 965.281210][ T7515] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 965.721048][ T7521] overlayfs: failed to resolve './file1': -2 [ 965.896282][ T7527] bridge0: port 4(macsec1) entered blocking state [ 965.902829][ T7527] bridge0: port 4(macsec1) entered disabled state [ 967.923064][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 969.065625][ T28] audit: type=1400 audit(1747678806.148:1637): avc: denied { mount } for pid=7544 comm="syz.4.1597" name="/" dev="ramfs" ino=37485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 969.128868][ T7551] xt_hashlimit: size too large, truncated to 1048576 [ 969.496179][ T7556] loop6: detected capacity change from 0 to 40427 [ 969.787586][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 969.796978][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1601'. [ 970.046569][ T7556] F2FS-fs (loop6): Found nat_bits in checkpoint [ 970.146249][ T7556] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 970.716763][ T7568] syz.6.1608: attempt to access beyond end of device [ 970.716763][ T7568] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 971.016928][ T28] audit: type=1400 audit(1747678807.808:1638): avc: denied { create } for pid=7555 comm="syz.6.1608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 971.038074][ T3828] syz-executor: attempt to access beyond end of device [ 971.038074][ T3828] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 971.109819][ T7573] loop5: detected capacity change from 0 to 2048 [ 971.126563][ T28] audit: type=1400 audit(1747678807.868:1639): avc: denied { read } for pid=7555 comm="syz.6.1608" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 971.227831][ T7573] EXT4-fs: Ignoring removed bh option [ 971.243522][ T7573] EXT4-fs: dax option not supported [ 971.353924][ T7576] fuse: Bad value for 'rootmode' [ 973.610046][ T7589] netlink: 'syz.5.1602': attribute type 13 has an invalid length. [ 973.648622][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.655897][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.744084][ T7595] loop5: detected capacity change from 0 to 512 [ 973.815184][ T7598] C: renamed from bond_slave_0 [ 973.833848][ T7595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 973.897060][ T7595] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 976.866021][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 977.497167][ T7618] overlayfs: './file0' not a directory [ 977.713936][ T7629] loop6: detected capacity change from 0 to 512 [ 979.853019][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1616'. [ 980.671708][ T7631] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1616'. [ 983.348589][ T7629] EXT4-fs warning (device loop6): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop6. [ 983.544462][ T28] audit: type=1400 audit(1747678820.638:1640): avc: denied { validate_trans } for pid=7639 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 983.958729][ T7651] bridge0: port 3(gretap0) entered blocking state [ 983.965307][ T7651] bridge0: port 3(gretap0) entered disabled state [ 983.984304][ T7651] device gretap0 entered promiscuous mode [ 984.329258][ T7651] device gretap0 left promiscuous mode [ 984.336962][ T7651] bridge0: port 3(gretap0) entered disabled state [ 987.671421][ T7657] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 987.680799][ T7657] FAT-fs (loop13): unable to read boot sector [ 988.130808][ T28] audit: type=1400 audit(1747678823.088:1641): avc: denied { create } for pid=7644 comm="syz.6.1622" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 988.295423][ T28] audit: type=1400 audit(1747678824.768:1642): avc: denied { mounton } for pid=7644 comm="syz.6.1622" path="/file0" dev="ramfs" ino=37604 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 988.566852][ T7661] IPv6: sit1: Disabled Multicast RS [ 990.130311][ T7682] overlayfs: failed to clone upperpath [ 991.149912][ T7687] fuse: Bad value for 'rootmode' [ 991.212322][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 991.225176][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1632'. [ 992.630838][ T28] audit: type=1400 audit(1747678829.718:1643): avc: denied { block_suspend } for pid=7701 comm="syz.8.1635" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 993.022971][ T28] audit: type=1400 audit(1747678830.068:1644): avc: denied { read } for pid=7701 comm="syz.8.1635" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 993.327959][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 994.003411][ T7722] overlayfs: failed to clone upperpath [ 994.201913][ T7733] IPv6: sit2: Disabled Multicast RS [ 994.865424][ T7739] xt_hashlimit: size too large, truncated to 1048576 [ 995.011310][ T7742] overlayfs: failed to clone upperpath [ 995.239007][ T28] audit: type=1400 audit(1747678832.328:1645): avc: denied { read } for pid=7745 comm="syz.5.1643" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 995.302480][ T28] audit: type=1400 audit(1747678832.378:1646): avc: denied { open } for pid=7745 comm="syz.5.1643" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 996.931298][ T28] audit: type=1400 audit(1747678833.078:1647): avc: denied { write accept } for pid=7745 comm="syz.5.1643" path="socket:[38316]" dev="sockfs" ino=38316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 998.318214][ T7764] loop5: detected capacity change from 0 to 512 [ 998.362891][ T7764] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 998.375282][ T7764] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 999.114311][ T7779] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1650'. [ 999.243791][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 999.440595][ T7783] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1651'. [ 999.452057][ T7783] device vlan0 entered promiscuous mode [ 999.743637][ T7788] IPv6: sit1: Disabled Multicast RS [ 1000.479952][ T7803] loop6: detected capacity change from 0 to 512 [ 1000.488598][ T7803] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1000.519797][ T7802] overlayfs: failed to clone upperpath [ 1000.815256][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1658'. [ 1000.830151][ T7808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1658'. [ 1001.127896][ T7803] EXT4-fs (loop6): 1 truncate cleaned up [ 1001.134802][ T7803] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1006.171995][ T7827] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1006.901038][ T28] audit: type=1400 audit(1747678842.758:1648): avc: denied { mounton } for pid=7813 comm="syz.5.1659" path="/44/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1007.540115][ T7833] xt_hashlimit: size too large, truncated to 1048576 [ 1007.933930][ T28] audit: type=1400 audit(1747678844.608:1649): avc: denied { unmount } for pid=6635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1007.958201][ T7839] loop5: detected capacity change from 0 to 256 [ 1007.991686][ T28] audit: type=1400 audit(1747678845.078:1650): avc: denied { remount } for pid=7835 comm="syz.5.1662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1008.041537][ T3828] EXT4-fs (loop6): unmounting filesystem. [ 1008.047919][ T7831] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1008.321775][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1662'. [ 1008.581739][ T7849] syz.1.1665[7849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.581816][ T7849] syz.1.1665[7849] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1008.641163][ T28] audit: type=1400 audit(1747678845.698:1651): avc: denied { execute } for pid=7840 comm="syz.1.1665" name="file0" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1008.685145][ T28] audit: type=1400 audit(1747678845.698:1652): avc: denied { execute_no_trans } for pid=7840 comm="syz.1.1665" path="/28/file0" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1009.847470][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1009.859195][ T7867] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1010.284648][ T7870] overlayfs: failed to clone upperpath [ 1010.703000][ T7876] netlink: 'syz.5.1672': attribute type 1 has an invalid length. [ 1011.840645][ T7878] 9pnet_fd: Insufficient options for proto=fd [ 1014.555480][ T7902] loop6: detected capacity change from 0 to 256 [ 1015.207684][ T7906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1679'. [ 1015.581234][ T7905] loop5: detected capacity change from 0 to 512 [ 1015.664279][ T7905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1015.818583][ T7905] EXT4-fs (loop5): 1 truncate cleaned up [ 1015.824371][ T7905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1016.467561][ T7910] xt_hashlimit: size too large, truncated to 1048576 [ 1017.099092][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1020.767400][ T7946] netlink: 'syz.1.1687': attribute type 1 has an invalid length. [ 1020.779425][ T7947] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1020.898484][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1697'. [ 1020.915338][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1697'. [ 1022.575946][ T28] audit: type=1400 audit(1747678859.668:1653): avc: denied { ioctl } for pid=7952 comm="syz.6.1690" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1024.690948][ T7963] xt_hashlimit: max too large, truncated to 1048576 [ 1025.090764][ T7965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=7965 comm=syz.6.1690 [ 1025.611315][ T7964] input: syz1 as /devices/virtual/input/input14 [ 1025.973127][ T7962] IPv6: sit1: Disabled Multicast RS [ 1026.881902][ T7972] loop6: detected capacity change from 0 to 512 [ 1026.906860][ T7972] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1026.914069][ T7972] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1026.926432][ T7972] EXT4-fs (loop6): 1 truncate cleaned up [ 1026.941237][ T7972] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1026.977457][ T1341] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1027.420859][ T28] audit: type=1400 audit(1747678864.508:1654): avc: denied { mounton } for pid=7971 comm="syz.6.1694" path="/syzcgroup/unified/syz6/file2/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1029.241808][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1698'. [ 1031.106093][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1031.157723][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1032.046462][ T8005] bridge0: port 4(gretap0) entered blocking state [ 1032.052984][ T8005] bridge0: port 4(gretap0) entered disabled state [ 1032.060858][ T8005] bridge0: port 4(gretap0) entered disabled state [ 1032.212728][ T8012] netlink: 'syz.5.1702': attribute type 4 has an invalid length. [ 1032.220501][ T8012] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1702'. [ 1032.947802][ T8013] netlink: 'syz.6.1703': attribute type 1 has an invalid length. [ 1033.696642][ T8017] overlayfs: failed to clone upperpath [ 1034.197520][ T8026] xt_l2tp: wrong L2TP version: 0 [ 1034.208581][ T8026] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1706'. [ 1034.220421][ T28] audit: type=1400 audit(1747678871.308:1655): avc: denied { ioctl } for pid=8021 comm="syz.6.1706" path="socket:[39347]" dev="sockfs" ino=39347 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1035.294362][ T8034] loop5: detected capacity change from 0 to 1024 [ 1036.249851][ T8034] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1036.259575][ T8034] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 1036.391069][ T7843] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1037.444793][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 1040.118639][ T8073] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1043.794499][ T5471] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1044.861283][ T8088] overlayfs: failed to resolve './file1': -2 [ 1046.413738][ T8091] netlink: 'syz.8.1718': attribute type 1 has an invalid length. [ 1046.443257][ T8087] overlayfs: failed to clone upperpath [ 1048.888664][ T8107] bridge0: port 4(gretap0) entered blocking state [ 1048.895224][ T8107] bridge0: port 4(gretap0) entered disabled state [ 1048.906756][ T8107] bridge0: port 4(gretap0) entered disabled state [ 1049.506576][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1724'. [ 1052.915801][ T8129] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1730'. [ 1052.973049][ T8132] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1052.984040][ T28] audit: type=1400 audit(1747678890.088:1656): avc: denied { read } for pid=8131 comm="syz.5.1731" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1053.015467][ T28] audit: type=1400 audit(1747678890.108:1657): avc: denied { open } for pid=8131 comm="syz.5.1731" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1053.168096][ T8139] overlayfs: failed to resolve './file1': -2 [ 1054.514837][ T8144] loop5: detected capacity change from 0 to 256 [ 1054.536362][ T8144] FAT-fs (loop5): Directory bread(block 64) failed [ 1054.547356][ T8144] FAT-fs (loop5): Directory bread(block 65) failed [ 1054.568943][ T8144] FAT-fs (loop5): Directory bread(block 66) failed [ 1054.583276][ T8144] FAT-fs (loop5): Directory bread(block 67) failed [ 1054.637077][ T8144] FAT-fs (loop5): Directory bread(block 68) failed [ 1054.666714][ T8144] FAT-fs (loop5): Directory bread(block 69) failed [ 1054.673381][ T8144] FAT-fs (loop5): Directory bread(block 70) failed [ 1054.679921][ T8144] FAT-fs (loop5): Directory bread(block 71) failed [ 1055.050973][ T8154] overlayfs: failed to clone lowerpath [ 1055.216021][ T8154] overlayfs: failed to clone upperpath [ 1055.709615][ T8144] FAT-fs (loop5): Directory bread(block 72) failed [ 1055.721771][ T8156] xt_hashlimit: size too large, truncated to 1048576 [ 1055.731524][ T8144] FAT-fs (loop5): Directory bread(block 73) failed [ 1055.758685][ T28] audit: type=1400 audit(1747678892.848:1658): avc: denied { read write } for pid=8157 comm="syz.1.1738" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1055.868353][ T28] audit: type=1400 audit(1747678892.888:1659): avc: denied { open } for pid=8157 comm="syz.1.1738" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1056.345352][ T8165] incfs: Error accessing: ./file0. [ 1056.351008][ T8165] incfs: mount failed -2 [ 1058.348598][ T28] audit: type=1400 audit(1747678893.258:1660): avc: denied { connect } for pid=8157 comm="syz.1.1738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1058.513243][ T28] audit: type=1400 audit(1747678894.188:1661): avc: denied { bind } for pid=8143 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1058.559786][ T28] audit: type=1400 audit(1747678894.198:1662): avc: denied { setopt } for pid=8143 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1058.581268][ T28] audit: type=1400 audit(1747678894.438:1663): avc: denied { create } for pid=8150 comm="syz.8.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1060.083160][ T8190] overlayfs: failed to clone upperpath [ 1060.767617][ T8192] overlayfs: failed to clone upperpath [ 1061.465533][ T8178] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1740'. [ 1061.607316][ T8198] overlayfs: failed to resolve './file1': -2 [ 1062.435286][ T8211] loop5: detected capacity change from 0 to 256 [ 1062.471433][ T8211] exfat: Deprecated parameter 'utf8' [ 1062.476884][ T8211] exfat: Deprecated parameter 'utf8' [ 1066.568552][ T8211] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1066.736432][ T28] audit: type=1326 audit(1747678903.828:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8223 comm="syz.8.1753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x0 [ 1066.793570][ T28] audit: type=1400 audit(1747678903.878:1665): avc: denied { write } for pid=8221 comm="syz.6.1752" name="usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1068.664172][ T8248] overlayfs: failed to resolve './file1': -2 [ 1069.940751][ T8257] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1760'. [ 1070.630857][ T28] audit: type=1326 audit(1747678907.718:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.686707][ T28] audit: type=1326 audit(1747678907.718:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.710523][ T28] audit: type=1326 audit(1747678907.718:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.744758][ T28] audit: type=1326 audit(1747678907.718:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.768482][ T28] audit: type=1326 audit(1747678907.718:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.805183][ T28] audit: type=1326 audit(1747678907.718:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1070.913894][ T28] audit: type=1326 audit(1747678907.718:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8264 comm="syz.8.1763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x7ffc0000 [ 1071.047175][ T8276] device veth0_to_team left promiscuous mode [ 1075.458782][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1075.470271][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1076.298890][ T8304] overlayfs: failed to clone upperpath [ 1076.740723][ T8306] overlayfs: failed to clone upperpath [ 1078.464661][ T8309] loop5: detected capacity change from 0 to 512 [ 1079.303057][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1773'. [ 1079.691528][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1773'. [ 1080.629337][ T8309] EXT4-fs (loop5): 1 orphan inode deleted [ 1080.635184][ T8309] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1080.644550][ T8309] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.761020][ T8321] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1775'. [ 1081.765499][ T28] audit: type=1400 audit(1747678918.858:1673): avc: denied { setattr } for pid=8294 comm="syz.5.1770" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1081.789112][ T3947] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1081.980751][ T3947] EXT4-fs error (device loop5): ext4_release_dquot:6812: comm kworker/u4:12: Failed to release dquot type 1 [ 1082.001458][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1082.105820][ T8324] fuse: Unknown parameter 'Yb0fe Ρ U%S:' [ 1083.461463][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.470361][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.482658][ T8340] device bridge_slave_0 entered promiscuous mode [ 1083.708979][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.716277][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.220174][ T8340] device bridge_slave_1 entered promiscuous mode [ 1086.788653][ T8376] overlayfs: failed to clone upperpath [ 1087.177166][ T8340] device veth0_vlan entered promiscuous mode [ 1088.261015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1088.314467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1088.322734][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1088.330302][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1088.337941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1088.938873][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1089.556893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.588469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.607077][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.614161][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.739889][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.748517][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.757131][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.764202][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.772204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1089.853266][ T28] audit: type=1400 audit(1747678926.948:1674): avc: denied { accept } for pid=8391 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1089.877057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1089.886431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1089.897153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1090.677628][ T8340] device veth1_macvtap entered promiscuous mode [ 1090.712137][ T8388] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1789'. [ 1090.721497][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1789'. [ 1090.741490][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1090.784508][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1090.792886][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1090.801388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1090.958949][ T8408] syz.4.1791[8408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.960264][ T8408] syz.4.1791[8408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.080878][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1092.333142][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1092.450030][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1092.550204][ T601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1094.344481][ T8434] overlayfs: failed to clone upperpath [ 1095.188041][ T8436] loop3: detected capacity change from 0 to 512 [ 1098.984883][ T8436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1099.002516][ T8436] EXT4-fs (loop3): 1 truncate cleaned up [ 1099.008197][ T8436] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1099.111803][ T8340] EXT4-fs (loop3): unmounting filesystem. [ 1099.572402][ T8453] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1800'. [ 1100.736927][ T8448] bridge0: port 3(gretap0) entered blocking state [ 1100.743483][ T8448] bridge0: port 3(gretap0) entered disabled state [ 1100.751266][ T8448] device gretap0 entered promiscuous mode [ 1100.764341][ T8448] device gretap0 left promiscuous mode [ 1100.770105][ T8448] bridge0: port 3(gretap0) entered disabled state [ 1102.321985][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1804'. [ 1102.331812][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1804'. [ 1103.337426][ T3947] device bridge_slave_1 left promiscuous mode [ 1103.361266][ T3947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.015344][ T8483] loop3: detected capacity change from 0 to 512 [ 1105.022388][ T8483] EXT4-fs: Ignoring removed oldalloc option [ 1105.272919][ T8479] overlayfs: failed to resolve './file1': -2 [ 1105.873919][ T8483] EXT4-fs (loop3): bad s_min_extra_isize: 65528 [ 1107.549985][ T8497] syz.3.1814[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1107.550071][ T8497] syz.3.1814[8497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1107.826507][ T28] audit: type=1400 audit(1747678944.818:1675): avc: denied { ioctl } for pid=8484 comm="syz.5.1812" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1108.811508][ T3947] device bridge_slave_0 left promiscuous mode [ 1108.817775][ T3947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.034508][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1109.053443][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 1110.449368][ T8510] overlayfs: unrecognized mount option "verity=require" or missing value [ 1110.720803][ T24] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1111.406360][ T24] usb 6-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 1111.419704][ T24] usb 6-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 1111.432036][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1111.446229][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1111.452590][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1111.470665][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.583956][ T8510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1111.591298][ T8510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1113.263603][ T24] usb 6-1: USB disconnect, device number 5 [ 1113.441838][ T28] audit: type=1400 audit(1747678950.538:1676): avc: denied { read write } for pid=8546 comm="syz.5.1825" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1113.475861][ T8543] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1113.485074][ T8543] FAT-fs (loop9): unable to read boot sector [ 1113.552830][ T28] audit: type=1400 audit(1747678950.628:1677): avc: denied { open } for pid=8546 comm="syz.5.1825" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1114.734787][ T28] audit: type=1400 audit(1747678951.828:1678): avc: denied { ioctl } for pid=8546 comm="syz.5.1825" path="socket:[41173]" dev="sockfs" ino=41173 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1115.059799][ T28] audit: type=1400 audit(1747678952.148:1679): avc: denied { create } for pid=8559 comm="syz.6.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1115.114548][ T28] audit: type=1400 audit(1747678952.178:1680): avc: denied { mounton } for pid=8559 comm="syz.6.1829" path="/proc/918/cgroup" dev="proc" ino=41184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1115.140609][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 1115.150066][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1828'. [ 1115.218874][ T28] audit: type=1400 audit(1747678952.178:1681): avc: denied { remount } for pid=8559 comm="syz.6.1829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1117.022535][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1832'. [ 1118.837359][ T8595] loop5: detected capacity change from 0 to 1024 [ 1118.983942][ T8595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1122.005703][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1122.446042][ T8628] overlayfs: failed to clone lowerpath [ 1122.461860][ T8628] overlayfs: failed to clone upperpath [ 1124.319297][ T8643] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1843'. [ 1124.608229][ T8650] loop5: detected capacity change from 0 to 512 [ 1125.362637][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1845'. [ 1125.602489][ T8650] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1125.775976][ T8650] EXT4-fs (loop5): 1 truncate cleaned up [ 1125.781970][ T8650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1125.794999][ T8650] EXT4-fs (loop5): unmounting filesystem. [ 1125.876285][ T8660] loop3: detected capacity change from 0 to 2048 [ 1126.011451][ T8660] loop3: p1 < > p3 [ 1127.221362][ T8660] loop3: p3 size 134217728 extends beyond EOD, truncated [ 1127.447036][ T8203] udevd[8203]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1127.458398][ T8213] udevd[8213]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1128.792003][ T8203] udevd[8203]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1128.865697][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1857'. [ 1128.893764][ T28] audit: type=1400 audit(1747678965.978:1682): avc: denied { getopt } for pid=8688 comm="syz.6.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1128.921794][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1857'. [ 1129.107504][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1856'. [ 1129.220409][ T8698] loop3: detected capacity change from 0 to 256 [ 1129.360194][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1852'. [ 1129.424856][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1852'. [ 1132.041568][ T8718] overlayfs: failed to resolve './file1': -2 [ 1137.028932][ T8759] loop5: detected capacity change from 0 to 128 [ 1137.039338][ T8759] ext2: Bad value for 'inode_readahead_blks' [ 1137.504838][ T8764] overlayfs: failed to clone upperpath [ 1139.767232][ T8774] futex_wake_op: syz.4.1875 tries to shift op by 32; fix this program [ 1141.321926][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1877'. [ 1141.336976][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1877'. [ 1141.595708][ T8213] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1142.199598][ T8791] bridge0: port 4(macsec1) entered blocking state [ 1142.206153][ T8791] bridge0: port 4(macsec1) entered disabled state [ 1143.164080][ T8802] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1885'. [ 1143.173426][ T8802] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1885'. [ 1143.183354][ T8802] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1885'. [ 1144.327539][ T8809] loop3: detected capacity change from 0 to 16 [ 1144.367737][ T8809] erofs: Unknown parameter '0177777777777777777777701777777777777777777777184467440737095516150xffffffffffffffff' [ 1144.745177][ T8820] overlayfs: failed to clone upperpath [ 1145.914966][ T8829] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1886'. [ 1146.039842][ T8829] loop3: detected capacity change from 0 to 512 [ 1147.603325][ T8833] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'. [ 1147.902209][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 1150.123469][ T8829] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1152.156493][ T8851] bridge0: port 4(macsec1) entered blocking state [ 1152.163495][ T8851] bridge0: port 4(macsec1) entered disabled state [ 1153.413040][ T8855] : renamed from vlan0 [ 1154.320717][ T8862] x_tables: duplicate underflow at hook 1 [ 1154.349719][ T8862] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 1154.645957][ T28] audit: type=1400 audit(1747678991.728:1683): avc: denied { bind } for pid=8844 comm="syz.3.1895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1154.937286][ T8872] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 1154.959277][ T28] audit: type=1400 audit(1747678992.048:1684): avc: denied { relabelto } for pid=8865 comm="syz.8.1899" name="216" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 1154.998136][ T28] audit: type=1400 audit(1747678992.088:1685): avc: denied { associate } for pid=8865 comm="syz.8.1899" name="216" dev="tmpfs" ino=1318 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:man_t:s0" [ 1156.052447][ T28] audit: type=1400 audit(1747678992.088:1686): avc: denied { watch watch_reads } for pid=8865 comm="syz.8.1899" path="/216" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 1156.080024][ T28] audit: type=1400 audit(1747678993.158:1687): avc: denied { write } for pid=8865 comm="syz.8.1899" name="216" dev="tmpfs" ino=1318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 1156.083433][ T8875] futex_wake_op: syz.8.1899 tries to shift op by -1; fix this program [ 1156.138646][ T28] audit: type=1400 audit(1747678993.158:1688): avc: denied { add_name } for pid=8865 comm="syz.8.1899" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 1156.245229][ T8884] loop3: detected capacity change from 0 to 256 [ 1157.632977][ T8884] loop3: detected capacity change from 0 to 512 [ 1157.678208][ T8884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1157.765234][ T28] audit: type=1400 audit(1747678993.158:1689): avc: denied { create } for pid=8865 comm="syz.8.1899" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.854272][ T8884] EXT4-fs (loop3): 1 truncate cleaned up [ 1157.860363][ T8884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1158.261599][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1904'. [ 1158.284680][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'. [ 1159.389342][ T28] audit: type=1400 audit(1747678993.158:1690): avc: denied { associate } for pid=8865 comm="syz.8.1899" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1159.518432][ T28] audit: type=1400 audit(1747678993.228:1691): avc: denied { write } for pid=8865 comm="syz.8.1899" name="file1" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.549929][ T28] audit: type=1400 audit(1747678993.228:1692): avc: denied { add_name } for pid=8865 comm="syz.8.1899" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.674591][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 1159.674615][ T28] audit: type=1400 audit(1747678996.768:1710): avc: denied { checkpoint_restore } for pid=8898 comm="syz.4.1907" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1159.814082][ T8340] EXT4-fs (loop3): unmounting filesystem. [ 1160.353970][ T8912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.361180][ T8912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.609055][ T8921] overlayfs: failed to clone upperpath [ 1161.618933][ T8912] device bridge_slave_0 entered promiscuous mode [ 1161.631937][ T8912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.639187][ T8912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.647163][ T8912] device bridge_slave_1 entered promiscuous mode [ 1161.655608][ T8911] netlink: 'syz.6.1911': attribute type 4 has an invalid length. [ 1161.715032][ T8911] netlink: 'syz.6.1911': attribute type 4 has an invalid length. [ 1162.058098][ T8925] bridge0: port 3(00XD) entered blocking state [ 1162.065384][ T8925] bridge0: port 3(00XD) entered disabled state [ 1162.072917][ T8925] device 00XD entered promiscuous mode [ 1162.081548][ T8925] device 00XD left promiscuous mode [ 1162.087494][ T8925] bridge0: port 3(00XD) entered disabled state [ 1162.766435][ T2622] device bridge_slave_1 left promiscuous mode [ 1162.773036][ T2622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.790994][ T2622] device bridge_slave_0 left promiscuous mode [ 1162.797454][ T2622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.067287][ T8930] loop5: detected capacity change from 0 to 256 [ 1164.066899][ T2622] device veth1_macvtap left promiscuous mode [ 1164.570461][ T2622] device veth0_vlan left promiscuous mode [ 1165.824190][ T8952] syz.5.1919[8952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.824268][ T8952] syz.5.1919[8952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1165.875979][ T8954] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1920'. [ 1165.898592][ T28] audit: type=1400 audit(1747679002.988:1711): avc: denied { create } for pid=8953 comm="syz.8.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1165.925117][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1917'. [ 1168.380754][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1168.388636][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1168.980748][ T8973] futex_wake_op: syz.8.1923 tries to shift op by -1; fix this program [ 1169.524129][ T8974] overlayfs: failed to clone upperpath [ 1169.780711][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1169.789315][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1169.797720][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.804886][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.813131][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1169.841034][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1169.849435][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.856555][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.867208][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1169.875768][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1169.884173][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1169.892509][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1169.912882][ T8912] device veth0_vlan entered promiscuous mode [ 1174.421112][ T28] audit: type=1326 audit(1747679011.498:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm="syz.8.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x7fc00000 [ 1174.607073][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1174.615936][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1174.623630][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1174.631630][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1174.639406][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1174.650198][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1174.680206][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1928'. [ 1174.739414][ T8912] device veth1_macvtap entered promiscuous mode [ 1176.054612][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1930'. [ 1176.740881][ T9013] overlayfs: failed to clone lowerpath [ 1177.121088][ T9014] overlayfs: failed to clone upperpath [ 1177.546070][ T9009] loop7: detected capacity change from 0 to 2048 [ 1177.574168][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1177.595387][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1177.604054][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1177.638409][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1177.657123][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1177.695410][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1177.711905][ T9009] loop7: p1 < > p3 [ 1177.716863][ T9009] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1177.724676][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1177.790801][ T28] audit: type=1400 audit(1747679014.868:1713): avc: denied { map } for pid=9019 comm="syz.6.1933" path="socket:[42414]" dev="sockfs" ino=42414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.830364][ T9027] overlayfs: failed to clone upperpath [ 1177.874399][ T28] audit: type=1400 audit(1747679014.868:1714): avc: denied { accept } for pid=9019 comm="syz.6.1933" path="socket:[42414]" dev="sockfs" ino=42414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1177.898192][ T9026] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1933'. [ 1178.017663][ T28] audit: type=1400 audit(1747679015.108:1715): avc: denied { wake_alarm } for pid=9032 comm="syz.5.1937" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1178.082989][ T9036] loop5: detected capacity change from 0 to 512 [ 1178.089662][ T9036] EXT4-fs: Ignoring removed mblk_io_submit option [ 1178.114029][ T9036] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1178.123769][ T9036] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1178.771162][ T9050] bridge0: port 4(macsec1) entered blocking state [ 1178.777961][ T9050] bridge0: port 4(macsec1) entered disabled state [ 1180.175828][ T9054] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1180.201965][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1180.294565][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 1183.432899][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1944'. [ 1184.852480][ T9100] loop5: detected capacity change from 0 to 512 [ 1184.859102][ T9100] EXT4-fs: Ignoring removed oldalloc option [ 1184.985268][ T9100] EXT4-fs (loop5): 1 truncate cleaned up [ 1184.991649][ T9100] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1185.086396][ T28] audit: type=1326 audit(1747679022.178:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9106 comm="syz.8.1950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0b658e969 code=0x0 [ 1185.472523][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1186.158226][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1953'. [ 1186.167485][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1953'. [ 1187.259410][ T9125] syz.6.1954[9125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.259489][ T9125] syz.6.1954[9125] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1187.273314][ T9129] loop5: detected capacity change from 0 to 1024 [ 1187.428736][ T9131] bridge0: port 3(macsec1) entered blocking state [ 1187.435406][ T9131] bridge0: port 3(macsec1) entered disabled state [ 1188.021688][ T9129] EXT4-fs: Ignoring removed orlov option [ 1188.039880][ T9129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1188.095907][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1955'. [ 1188.342342][ T9129] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1189.097915][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1192.748854][ T9187] device bridge0 entered promiscuous mode [ 1192.756466][ T9187] bridge0: port 3(macsec1) entered blocking state [ 1192.763094][ T9187] bridge0: port 3(macsec1) entered disabled state [ 1193.810918][ T9187] device bridge0 left promiscuous mode [ 1194.124529][ T9192] syz.4.1969[9192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1194.124614][ T9192] syz.4.1969[9192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1194.924020][ T9204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1971'. [ 1196.220860][ T9210] overlayfs: failed to resolve './file1': -2 [ 1196.667010][ T9213] overlayfs: failed to clone upperpath [ 1197.512173][ T28] audit: type=1400 audit(1747679034.608:1717): avc: denied { append } for pid=9219 comm="syz.7.1976" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1197.888563][ T9220] loop7: detected capacity change from 0 to 2048 [ 1197.896479][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1978'. [ 1197.906695][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1978'. [ 1197.916611][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1978'. [ 1197.997770][ T9220] loop7: p1 < > p3 [ 1198.004026][ T9220] loop7: p3 size 134217728 extends beyond EOD, truncated [ 1199.319896][ T9000] udevd[9000]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 1199.387591][ T9004] udevd[9004]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 1201.293134][ T9249] syz.4.1983[9249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1201.293204][ T9249] syz.4.1983[9249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1201.340081][ T9252] loop7: detected capacity change from 0 to 512 [ 1201.459063][ T9252] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1201.477319][ T28] audit: type=1400 audit(1747679038.578:1718): avc: denied { accept } for pid=9256 comm="syz.4.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1201.497802][ T9252] EXT4-fs (loop7): Remounting filesystem read-only [ 1201.517311][ T9261] loop5: detected capacity change from 0 to 512 [ 1201.524960][ T9252] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1984: invalid indirect mapped block 4278190080 (level 0) [ 1201.539977][ T9252] EXT4-fs (loop7): Remounting filesystem read-only [ 1201.546851][ T9252] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1984: invalid indirect mapped block 1 (level 1) [ 1201.552672][ T9261] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1201.561159][ T9252] EXT4-fs (loop7): Remounting filesystem read-only [ 1201.569695][ T9261] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1201.576769][ T9252] EXT4-fs (loop7): 1 truncate cleaned up [ 1201.608924][ T9252] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1201.647775][ T9265] overlayfs: failed to resolve './file1': -2 [ 1202.425549][ T28] audit: type=1400 audit(1747679039.298:1719): avc: denied { setattr } for pid=9251 comm="syz.7.1984" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1202.463676][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1988'. [ 1203.572611][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1203.579378][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1203.715934][ T9283] loop5: detected capacity change from 0 to 512 [ 1203.793692][ T9283] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1203.804903][ T9283] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1203.814792][ T9283] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.1991: Failed to acquire dquot type 0 [ 1203.826681][ T9283] EXT4-fs (loop5): Remounting filesystem read-only [ 1203.868717][ T9291] device bridge0 entered promiscuous mode [ 1203.875861][ T9291] bridge0: port 3(macsec1) entered blocking state [ 1203.882464][ T9291] bridge0: port 3(macsec1) entered disabled state [ 1203.897712][ T9291] device bridge0 left promiscuous mode [ 1203.917546][ T9283] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1203.933816][ T9283] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1203.947787][ T9283] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.1991: Failed to acquire dquot type 0 [ 1203.966049][ T9283] EXT4-fs (loop5): Remounting filesystem read-only [ 1203.973683][ T9283] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1203.984585][ T9283] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 1204.001727][ T9283] EXT4-fs error (device loop5): ext4_acquire_dquot:6789: comm syz.5.1991: Failed to acquire dquot type 0 [ 1204.017981][ T9297] syz.4.1995[9297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.018058][ T9297] syz.4.1995[9297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.035558][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1993'. [ 1204.057161][ T9283] EXT4-fs (loop5): Remounting filesystem read-only [ 1204.064449][ T9283] EXT4-fs (loop5): 1 orphan inode deleted [ 1204.070890][ T9283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1204.080866][ T9283] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1204.842012][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1204.928215][ T9305] loop7: detected capacity change from 0 to 128 [ 1204.935454][ T9305] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1204.942609][ T9305] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1204.953153][ T9311] loop5: detected capacity change from 0 to 128 [ 1204.969269][ T9306] syz.4.1997[9306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.969349][ T9306] syz.4.1997[9306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.985839][ T9311] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1205.328646][ T9311] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1205.520877][ T9320] loop5: detected capacity change from 0 to 512 [ 1205.543509][ T9321] overlayfs: failed to resolve './file1': -2 [ 1205.818149][ T9320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1205.827330][ T9320] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1207.390710][ T9330] netlink: 'syz.4.2001': attribute type 4 has an invalid length. [ 1207.540710][ T9330] netlink: 'syz.4.2001': attribute type 4 has an invalid length. [ 1208.424617][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2003'. [ 1208.663326][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1209.154663][ T9343] syz.6.2008[9343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1209.154742][ T9343] syz.6.2008[9343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1211.109019][ T9355] loop7: detected capacity change from 0 to 256 [ 1211.508585][ T28] audit: type=1400 audit(1747679048.598:1720): avc: denied { remount } for pid=9363 comm="syz.6.2013" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1211.529472][ T9364] option changes via remount are deprecated (pid=9363 comm=syz.6.2013) [ 1211.537837][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1211.540275][ T9364] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 1211.870733][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1211.877718][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1211.925906][ T24] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 1211.982217][ T24] usb 8-1: config 0 has no interface number 0 [ 1212.024194][ T24] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1215.207078][ T24] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1215.430655][ T24] usb 8-1: config 0 interface 88 has no altsetting 0 [ 1215.446606][ T24] usb 8-1: string descriptor 0 read error: -71 [ 1215.614397][ T24] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1217.118574][ T9384] overlayfs: failed to resolve './file1': -2 [ 1217.752439][ T24] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1218.194109][ T9399] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2022'. [ 1218.311016][ T24] usb 8-1: config 0 descriptor?? [ 1218.320016][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2019'. [ 1218.328242][ T9405] syz.6.2023[9405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.332538][ T9405] syz.6.2023[9405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.349670][ T24] usb 8-1: can't set config #0, error -71 [ 1218.367805][ T28] audit: type=1400 audit(1747679055.458:1721): avc: denied { setattr } for pid=9389 comm="syz.7.2020" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 1218.368826][ T24] usb 8-1: USB disconnect, device number 2 [ 1218.450438][ T9403] loop7: detected capacity change from 0 to 1024 [ 1218.457313][ T9403] EXT4-fs: Ignoring removed nobh option [ 1218.462969][ T9403] EXT4-fs: Ignoring removed bh option [ 1218.468707][ T9403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1218.510151][ T9403] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1218.531240][ T28] audit: type=1400 audit(1747679055.628:1722): avc: denied { write } for pid=9389 comm="syz.7.2020" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1218.546053][ T9403] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.2020: Allocating blocks 497-513 which overlap fs metadata [ 1218.567892][ T9403] EXT4-fs (loop7): pa ffff888135f6b540: logic 256, phys. 385, len 8 [ 1218.575984][ T9403] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 1218.601986][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2020'. [ 1218.639706][ T9415] syz.8.2025[9415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.639812][ T9415] syz.8.2025[9415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.837377][ T9418] overlayfs: failed to clone upperpath [ 1220.146080][ T9428] overlayfs: failed to resolve './file0': -2 [ 1220.830736][ T9433] overlayfs: failed to clone upperpath [ 1220.960727][ T567] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1221.057489][ T9441] overlayfs: failed to clone upperpath [ 1221.430635][ T567] usb 7-1: Using ep0 maxpacket: 8 [ 1221.437095][ T567] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1221.471345][ T567] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1221.479464][ T567] usb 7-1: config 0 has no interface number 0 [ 1221.510616][ T567] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1221.530617][ T567] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1221.540557][ T567] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1221.559325][ T567] usb 7-1: string descriptor 0 read error: -22 [ 1221.580644][ T567] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1221.589720][ T567] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1221.614918][ T567] usb 7-1: config 0 descriptor?? [ 1221.640696][ T567] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input15 [ 1221.680718][ T9004] udevd[9004]: Error opening device "/dev/input/event3": Input/output error [ 1221.689535][ T9004] udevd[9004]: Unable to EVIOCGABS device "/dev/input/event3" [ 1221.751249][ T9004] udevd[9004]: Unable to EVIOCGABS device "/dev/input/event3" [ 1221.762104][ T9446] loop5: detected capacity change from 0 to 512 [ 1221.878213][ T9446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1221.901140][ T9446] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.940023][ T9451] overlayfs: failed to resolve './file1': -2 [ 1221.981408][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1222.687399][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2034'. [ 1222.964470][ T6635] EXT4-fs (loop5): unmounting filesystem. [ 1223.574128][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 1223.812978][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2037'. [ 1223.823983][ T9466] device vlan0 entered promiscuous mode [ 1223.829595][ T9466] device bridge0 entered promiscuous mode [ 1224.060745][ T6] usb 7-1: USB disconnect, device number 4 [ 1224.187037][ T28] audit: type=1400 audit(1747679061.278:1723): avc: denied { read } for pid=9468 comm="syz.7.2039" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1224.235197][ T9472] loop7: detected capacity change from 0 to 1024 [ 1224.268477][ T28] audit: type=1400 audit(1747679061.278:1724): avc: denied { open } for pid=9468 comm="syz.7.2039" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1224.293922][ T28] audit: type=1400 audit(1747679061.278:1725): avc: denied { ioctl } for pid=9468 comm="syz.7.2039" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1224.352609][ T28] audit: type=1400 audit(1747679061.318:1726): avc: denied { ioctl } for pid=9468 comm="syz.7.2039" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x330f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1224.381539][ T9472] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1224.834207][ T9473] syz.5.2036[9473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1224.835445][ T9473] syz.5.2036[9473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1225.254535][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1225.846269][ T9498] overlayfs: failed to resolve './file1': -2 [ 1226.943874][ T9471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2036'. [ 1227.283204][ T9509] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1227.292081][ T9509] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1227.488516][ T9513] devtmpfs: Unknown parameter 'nr_˯wdxblUaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa./file0' [ 1227.527052][ T9513] loop7: detected capacity change from 0 to 512 [ 1227.536482][ T28] audit: type=1400 audit(1747679064.578:1727): avc: denied { remount } for pid=9507 comm="syz.7.2044" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1227.556869][ T5869] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1227.572302][ T9513] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1227.603449][ T28] audit: type=1400 audit(1747679064.628:1728): avc: denied { mounton } for pid=9507 comm="syz.7.2044" path="/16/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1227.634993][ T9513] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.2044: iget: bad i_size value: -67835469387268086 [ 1227.648377][ T9513] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2044: couldn't read orphan inode 15 (err -117) [ 1227.660809][ T9513] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1227.669325][ T9513] ext2 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1227.860612][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 1227.866905][ T5869] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1227.875132][ T5869] usb 6-1: config 0 has no interface number 0 [ 1227.881387][ T5869] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x6 has invalid maxpacket 5887, setting to 1024 [ 1227.892577][ T5869] usb 6-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1227.957513][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2049'. [ 1228.046138][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1228.065455][ T5869] usb 6-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1228.100197][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.185480][ T5869] usb 6-1: Product: syz [ 1228.238233][ T5869] usb 6-1: Manufacturer: syz [ 1228.284849][ T5869] usb 6-1: SerialNumber: syz [ 1228.738646][ T28] audit: type=1400 audit(1747679065.828:1729): avc: denied { unmount } for pid=8912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1228.770421][ T9527] option changes via remount are deprecated (pid=9526 comm=syz.7.2050) [ 1229.085453][ T5869] usb 6-1: config 0 descriptor?? [ 1229.720193][ T5869] usb 6-1: can't set config #0, error -71 [ 1229.740340][ T9527] cgroup: option or name mismatch, new: 0x10000 "", old: 0x0 "" [ 1229.751505][ T5869] usb 6-1: USB disconnect, device number 7 [ 1230.094147][ T28] audit: type=1400 audit(1747679066.948:1730): avc: denied { create } for pid=9531 comm="syz.6.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1230.183745][ T9537] loop5: detected capacity change from 0 to 128 [ 1230.197666][ T9534] loop7: detected capacity change from 0 to 2048 [ 1230.219781][ T9537] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1230.247881][ T9537] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1230.266368][ T9534] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1230.279148][ T9534] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.380356][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1231.293449][ T28] audit: type=1400 audit(1747679068.308:1731): avc: denied { watch watch_reads } for pid=9541 comm="syz.8.2054" path="/253/file0" dev="tmpfs" ino=1545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1231.451003][ T9553] syz.7.2056[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1231.451446][ T9553] syz.7.2056[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1232.538277][ T9551] can0: slcan on ptm0. [ 1232.554638][ T28] audit: type=1400 audit(1747679069.638:1732): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1232.596292][ T9553] loop7: detected capacity change from 0 to 40427 [ 1232.918969][ T9563] futex_wake_op: syz.5.2053 tries to shift op by -1; fix this program [ 1232.999397][ T9553] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1233.007206][ T9553] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1233.015759][ T28] audit: type=1400 audit(1747679069.648:1733): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.311335][ T28] audit: type=1400 audit(1747679069.648:1734): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=11927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1233.335306][ T28] audit: type=1400 audit(1747679069.648:1735): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=11927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1233.407028][ T28] audit: type=1400 audit(1747679069.648:1736): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=11927 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1233.431334][ T28] audit: type=1400 audit(1747679070.458:1737): avc: denied { read } for pid=9571 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1233.456500][ T9553] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1233.614830][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 1233.624233][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 1233.836781][ T9582] overlayfs: failed to clone lowerpath [ 1234.805135][ T9537] can0 (unregistered): slcan off ptm0. [ 1235.922507][ T28] audit: type=1400 audit(1747679070.458:1738): avc: denied { open } for pid=9571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.010297][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2063'. [ 1236.223422][ T9602] loop5: detected capacity change from 0 to 128 [ 1236.261766][ T9602] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1236.292566][ T28] audit: type=1400 audit(1747679070.458:1739): avc: denied { getattr } for pid=9571 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1236.317950][ T9602] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1236.510336][ T9609] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1236.519239][ T9609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1237.226984][ T28] audit: type=1400 audit(1747679074.318:1740): avc: denied { write } for pid=9559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.302675][ T28] audit: type=1400 audit(1747679074.318:1741): avc: denied { add_name } for pid=9559 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.400322][ T28] audit: type=1400 audit(1747679074.318:1742): avc: denied { create } for pid=9559 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1237.438691][ T28] audit: type=1400 audit(1747679074.318:1743): avc: denied { write } for pid=9559 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=11976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1237.503334][ T9623] syz.6.2065[9623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.503414][ T9623] syz.6.2065[9623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1237.530631][ T28] audit: type=1400 audit(1747679074.318:1744): avc: denied { append } for pid=9559 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=11976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1237.698820][ T9627] loop7: detected capacity change from 0 to 512 [ 1237.870466][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2067'. [ 1237.879571][ T9629] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2067'. [ 1238.595804][ T9627] EXT4-fs: Ignoring removed i_version option [ 1238.601906][ T9627] EXT4-fs: Ignoring removed mblk_io_submit option [ 1238.862715][ T9627] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1238.959162][ T9631] can0: slcan on ptm0. [ 1239.057799][ T9627] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.2066: inode #13: comm syz.7.2066: iget: illegal inode # [ 1239.071747][ T9627] EXT4-fs (loop7): Remounting filesystem read-only [ 1239.078319][ T9627] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2066: couldn't read orphan inode 13 (err -117) [ 1239.091336][ T9627] EXT4-fs (loop7): Remounting filesystem read-only [ 1239.097923][ T9627] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1239.258317][ T9634] syz.8.2068[9634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.260161][ T9634] syz.8.2068[9634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.773182][ T9631] futex_wake_op: syz.5.2075 tries to shift op by -1; fix this program [ 1239.857996][ T28] audit: type=1400 audit(1747679074.448:1745): avc: denied { remove_name } for pid=9616 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=11976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1239.886174][ T28] audit: type=1400 audit(1747679074.448:1746): avc: denied { unlink } for pid=9616 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=11976 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1239.970719][ T9633] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 426: padding at end of block bitmap is not set [ 1240.066572][ T9633] EXT4-fs (loop7): Remounting filesystem read-only [ 1240.081633][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1240.081775][ T9602] can0 (unregistered): slcan off ptm0. [ 1240.165228][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2069'. [ 1240.489155][ T9655] device bridge0 entered promiscuous mode [ 1240.497132][ T9655] bridge0: port 3(macsec1) entered blocking state [ 1240.503647][ T9655] bridge0: port 3(macsec1) entered disabled state [ 1240.683959][ T9655] device bridge0 left promiscuous mode [ 1241.047378][ T9661] loop5: detected capacity change from 0 to 1024 [ 1241.144233][ T9663] tipc: Started in network mode [ 1241.149146][ T9663] tipc: Node identity ac141425, cluster identity 4711 [ 1241.155954][ T9663] tipc: Enabling of bearer rejected, failed to enable media [ 1241.473131][ T9661] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1241.481602][ T9661] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1241.507477][ T9661] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1241.528164][ T9661] journal_init_common: Cannot get buffer for journal superblock [ 1241.543306][ T9661] EXT4-fs (loop5): Could not load journal inode [ 1241.552093][ T9669] device bridge0 entered promiscuous mode [ 1241.558451][ T9669] bridge0: port 3(macsec1) entered blocking state [ 1241.564961][ T9669] bridge0: port 3(macsec1) entered disabled state [ 1241.587818][ T9669] device bridge0 left promiscuous mode [ 1242.129198][ T28] audit: type=1400 audit(1747679079.208:1747): avc: denied { write } for pid=9679 comm="syz.6.2078" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1242.160346][ T28] audit: type=1400 audit(1747679079.208:1748): avc: denied { read } for pid=9679 comm="syz.6.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1242.508338][ T9678] netlink: 'syz.4.2077': attribute type 3 has an invalid length. [ 1243.660616][ T9697] loop7: detected capacity change from 0 to 512 [ 1243.667198][ T9697] EXT4-fs: Ignoring removed i_version option [ 1243.673271][ T9697] EXT4-fs: Ignoring removed mblk_io_submit option [ 1243.684288][ T9697] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1243.709556][ T9697] EXT4-fs error (device loop7): ext4_orphan_get:1400: comm syz.7.2079: inode #13: comm syz.7.2079: iget: illegal inode # [ 1243.722707][ T9697] EXT4-fs (loop7): Remounting filesystem read-only [ 1243.729238][ T9697] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.2079: couldn't read orphan inode 13 (err -117) [ 1243.891394][ T9704] syz.8.2082[9704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1243.891736][ T9704] syz.8.2082[9704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.018011][ T9697] EXT4-fs (loop7): Remounting filesystem read-only [ 1244.036093][ T9697] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1244.130251][ T9682] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2078'. [ 1244.249248][ T8912] EXT4-fs (loop7): unmounting filesystem. [ 1244.301382][ T9714] loop7: detected capacity change from 0 to 16 [ 1244.331518][ T9714] erofs: (device loop7): mounted with root inode @ nid 36. [ 1245.920733][ T9727] netlink: 'syz.6.2086': attribute type 4 has an invalid length. [ 1247.747157][ T9728] netlink: 'syz.6.2086': attribute type 4 has an invalid length. [ 1247.789190][ T9732] netlink: 'syz.6.2086': attribute type 4 has an invalid length. [ 1248.071896][ T8912] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1248.120537][ T8912] erofs: (device loop7): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 1248.173582][ T9742] bridge0: port 3(macsec1) entered blocking state [ 1248.180220][ T9742] bridge0: port 3(macsec1) entered disabled state [ 1248.270371][ T9746] fuse: Unknown parameter 'fd0x0000000000000003' [ 1248.409121][ T9748] overlayfs: missing 'lowerdir' [ 1249.197861][ T9750] netlink: 'syz.6.2088': attribute type 12 has an invalid length. [ 1249.865638][ T9759] loop5: detected capacity change from 0 to 128 [ 1249.881393][ T9759] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1249.888385][ T9759] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1251.569991][ T28] audit: type=1400 audit(1747679088.638:1749): avc: denied { create } for pid=9760 comm="syz.6.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1251.766135][ T9770] can0: slcan on ptm0. [ 1251.888407][ T28] audit: type=1400 audit(1747679088.978:1750): avc: denied { write } for pid=9758 comm="syz.7.2094" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1251.901873][ T9770] futex_wake_op: syz.5.2092 tries to shift op by -1; fix this program [ 1252.027985][ T9784] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 1252.310813][ T9759] can0 (unregistered): slcan off ptm0. [ 1252.423826][ T9796] loop5: detected capacity change from 0 to 128 [ 1252.450394][ T9796] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1252.467438][ T9796] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1252.581454][ T9811] can0: slcan on ptm0. [ 1252.637298][ T9811] futex_wake_op: syz.5.2099 tries to shift op by -1; fix this program [ 1254.292157][ T9826] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1254.307659][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 1254.316647][ T9827] device bridge_slave_1 left promiscuous mode [ 1254.322839][ T9827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.330513][ T9827] device bridge_slave_0 left promiscuous mode [ 1254.337614][ T9827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.349185][ T9827] device bridge0 left promiscuous mode [ 1254.801153][ T9833] loop7: detected capacity change from 0 to 256 [ 1254.815022][ T9796] can0 (unregistered): slcan off ptm0. [ 1254.829650][ T9833] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1256.216231][ T9842] bridge0: port 4(macsec1) entered blocking state [ 1256.223482][ T9842] bridge0: port 4(macsec1) entered disabled state [ 1256.558488][ T9847] overlayfs: missing 'lowerdir' [ 1257.162457][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1257.172405][ T28] audit: type=1400 audit(1747679094.268:1751): avc: denied { create } for pid=9856 comm="syz.8.2109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1257.201697][ T9860] loop5: detected capacity change from 0 to 128 [ 1257.210497][ T9860] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1257.217641][ T9860] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 1259.227931][ T9869] syz.8.2113[9869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1259.228012][ T9869] syz.8.2113[9869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1259.318787][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 1259.922238][ T9874] loop7: detected capacity change from 0 to 256 [ 1259.929083][ T9874] FAT-fs (loop7): Unrecognized mount option "check=relaxdd" or missing value [ 1260.069826][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1260.141686][ T24] usb 7-1: device descriptor read/all, error -71 [ 1260.151198][ T9875] can0: slcan on ptm0. [ 1260.712034][ T9887] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1263.575645][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2115'. [ 1263.584973][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2115'. [ 1263.680964][ T9882] can0 (unregistered): slcan off ptm0. [ 1263.694077][ T9899] bridge0: port 3(macsec1) entered blocking state [ 1263.700613][ T9899] bridge0: port 3(macsec1) entered disabled state [ 1264.440360][ T9908] netlink: 'syz.6.2118': attribute type 4 has an invalid length. [ 1265.581249][ T9915] loop5: detected capacity change from 0 to 256 [ 1265.617009][ T9912] loop7: detected capacity change from 0 to 512 [ 1265.628585][ T9912] EXT4-fs: Ignoring removed oldalloc option [ 1265.920905][ T9912] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1266.222774][ T9915] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1268.813378][ T9912] EXT4-fs: failed to create workqueue [ 1268.818803][ T9912] EXT4-fs (loop7): mount failed [ 1268.910720][ T28] audit: type=1400 audit(1747679105.998:1752): avc: denied { read } for pid=9917 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1269.273995][ T9927] overlayfs: missing 'lowerdir' [ 1269.660936][ T9928] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1269.836336][ T9935] syz.8.2126[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1269.836417][ T9935] syz.8.2126[9935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1270.800479][ T9931] loop5: detected capacity change from 0 to 512 [ 1270.819927][ T9931] EXT4-fs: Ignoring removed i_version option [ 1271.003426][ T9943] syz.8.2128[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1271.003506][ T9943] syz.8.2128[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1272.040893][ T9931] EXT4-fs: error -4 creating inode table initialization thread [ 1272.060096][ T9931] EXT4-fs (loop5): mount failed [ 1272.677180][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1272.689602][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2129'. [ 1272.981800][ T9958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1273.091594][ T9961] bridge0: port 4(macsec1) entered blocking state [ 1273.098126][ T9961] bridge0: port 4(macsec1) entered disabled state [ 1273.337620][ T9965] futex_wake_op: syz.6.2130 tries to shift op by -1; fix this program [ 1273.906603][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2134'. [ 1273.932505][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2134'. [ 1276.323174][T10001] bridge0: port 3(macsec1) entered blocking state [ 1276.329924][T10001] bridge0: port 3(macsec1) entered disabled state [ 1276.420785][T10002] overlayfs: missing 'workdir' [ 1278.482156][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2141'. [ 1278.500357][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2141'. [ 1279.589751][ T28] audit: type=1400 audit(1747679116.678:1753): avc: denied { read write } for pid=10027 comm="ip" path="/dev/console" dev="rootfs" ino=1006 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 1279.933570][T10048] usb usb8: usbfs: process 10048 (syz.7.2145) did not claim interface 0 before use [ 1279.946486][T10048] loop7: detected capacity change from 0 to 16 [ 1279.953110][T10048] erofs: Unknown parameter '0177777777777777777777700000000000000000000000184467440737095516150xffffffffffffffff' [ 1281.707251][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1281.774697][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2146'. [ 1281.784040][T10054] 8021q: VLANs not supported on ip6gre0 [ 1282.614220][ T28] audit: type=1326 audit(1747679119.708:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1282.706931][T10059] loop7: detected capacity change from 0 to 2048 [ 1282.731991][ T28] audit: type=1326 audit(1747679119.738:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1282.755748][ T28] audit: type=1326 audit(1747679119.738:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1282.786239][ T28] audit: type=1326 audit(1747679119.738:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1282.821894][T10059] loop7: p3 < > p4 < > [ 1282.826164][T10059] loop7: partition table partially beyond EOD, truncated [ 1282.840712][T10059] loop7: p3 start 4284289 is beyond EOD, truncated [ 1282.943074][T10067] overlayfs: missing 'workdir' [ 1283.769970][ T28] audit: type=1326 audit(1747679119.738:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1283.793851][ T28] audit: type=1326 audit(1747679119.738:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1284.553141][ T28] audit: type=1326 audit(1747679119.738:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1285.718929][T10078] netlink: 'syz.5.2153': attribute type 3 has an invalid length. [ 1286.296732][ T28] audit: type=1326 audit(1747679119.738:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.338350][ T28] audit: type=1400 audit(1747679119.758:1762): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 1286.410601][ T28] audit: type=1326 audit(1747679119.758:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.449261][T10096] futex_wake_op: syz.8.2156 tries to shift op by -1; fix this program [ 1286.509962][ T28] audit: type=1326 audit(1747679119.758:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.546737][ T28] audit: type=1326 audit(1747679119.758:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.600171][ T28] audit: type=1326 audit(1747679119.758:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.723830][ T28] audit: type=1326 audit(1747679119.758:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.760029][ T28] audit: type=1326 audit(1747679119.758:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1286.803181][ T28] audit: type=1326 audit(1747679119.758:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1290.213380][ T28] audit: type=1326 audit(1747679119.758:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10058 comm="syz.7.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1290.218386][T10110] can0: slcan on ptm0. [ 1290.383724][T10123] futex_wake_op: syz.6.2160 tries to shift op by -1; fix this program [ 1291.052644][T10130] overlayfs: missing 'workdir' [ 1291.478602][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 1291.478617][ T28] audit: type=1400 audit(1747679128.568:1827): avc: denied { write } for pid=87 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.520650][T10108] can0 (unregistered): slcan off ptm0. [ 1291.543906][ T28] audit: type=1400 audit(1747679128.568:1828): avc: denied { remove_name } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1291.566502][ T28] audit: type=1400 audit(1747679128.568:1829): avc: denied { unlink } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1292.510430][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1292.519249][T10146] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1292.535569][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2165'. [ 1292.544505][T10147] device bridge_slave_1 left promiscuous mode [ 1292.550663][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.576940][T10147] device bridge_slave_0 left promiscuous mode [ 1292.583362][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.220329][T10165] loop7: detected capacity change from 0 to 512 [ 1294.281082][T10165] EXT4-fs (loop7): 1 orphan inode deleted [ 1294.286847][T10165] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1294.300664][ T4613] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1294.332851][ T4613] EXT4-fs error (device loop7): ext4_release_dquot:6812: comm kworker/u4:16: Failed to release dquot type 1 [ 1294.350753][T10165] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.267906][ T28] audit: type=1326 audit(1747679132.668:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1296.397180][ T28] audit: type=1326 audit(1747679132.668:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1296.426460][ T28] audit: type=1326 audit(1747679132.768:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1296.458924][ T28] audit: type=1326 audit(1747679133.428:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 [ 1296.483393][ T28] audit: type=1326 audit(1747679133.428:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.7.2170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1718d8e969 code=0x7ffc0000 serialport: VM disconnected.