ting program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000001c0)=@framed={{}, [@generic, @map_idx_val, @ldst]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xf9, &(0x7f0000000300)=""/249, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:17 executing program 5: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f00000001c0)) 18:22:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x3}]}}, &(0x7f0000000400)=""/252, 0x26, 0xfc, 0x1}, 0x20) 18:22:17 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=@raw=[@generic], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001d80)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000001940)=[@hoplimit_2292={{0x14}}], 0x18}, 0x0) 18:22:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@var={0x4, 0x0, 0x0, 0xe, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x5f, 0x61]}}, &(0x7f0000000400)=""/248, 0x3c, 0xf8, 0x2}, 0x20) 18:22:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xfff, 0x1, 0x7}, 0x48) 18:22:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x21, 0x0, &(0x7f0000000200)) 18:22:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) 18:22:17 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}, 0x48) 18:22:17 executing program 0: bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x48) 18:22:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89a3, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 18:22:17 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680), 0x10) 18:22:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x10001, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:22:17 executing program 3: bpf$MAP_CREATE(0x1d, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 18:22:17 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000140)={@remote, @empty}, 0x8) 18:22:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) 18:22:17 executing program 1: bpf$BPF_PROG_TEST_RUN(0xb, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x48) 18:22:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 18:22:18 executing program 2: r0 = socket(0xa, 0x3, 0xd3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8936, 0x0) 18:22:18 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc) 18:22:18 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) 18:22:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x5, 0x4, [@func]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000400)=""/252, 0x28, 0xfc, 0x1}, 0x20) 18:22:18 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001d80)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="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", 0x355}], 0x1, &(0x7f0000001940)=[@hopopts={{0x268, 0x29, 0x36, {0x0, 0x4a, '\x00', [@generic={0x0, 0xca, "8e710f62c691ce89fd5325ab90a45f6f3930121ef83493fa9576a4d287c85faacf6281056045f7b52d5fec5352ae2acc3686b4c2f618b1a7cb56d10742499664dffdfde5d7b3494d099d4f2132fd92cb76cb15ee7b0c549c41d07b69a0fe821337e8fe50be37be154c37afbc60bf1f3eaa44e4f153bb6e2159e4f6d60c6187f530fc48d7ed307cc9eed4c6d227e115fe00bc380c457b2f9d1d304c213dacbe91dd8d07cc6d1bf77c6f2a97f20a7ba998acb8bd7b70163b543c62fec862b57ee5b250143abb34e7f74af1"}, @ra, @generic={0x0, 0x66, "eb86684672933e54d3de110dcd1c2cab3e206904c9b6cf2849f8616c089c0c9ef04d2fb41c242a16273dce5f7a2220a863d1147a5676a97c90c0b0ac0ac30b1633f053736e0b5dced802d854f369a90c3da86e543cc4b6e5a64ace12fc57abd8cf0a5a419737"}, @jumbo, @ra, @generic={0x0, 0xb8, "8302acd82f3adeda7814464d584a764d8f70603b9bae49e92cd095bb5a43c13783edf4e9215d2b7d75c36162e577eac749bd1246138ceb9de83ad81aa945ab0ba8d87ae8d3716cd2c059297e57a372acffd384af45f4e3ea105205dcc3bc2960f99a627e80c8488b52f1ecff4c2b754e818ca078364356ab3ce05fe9cd9c36083f08b0d0bfd355a96db0a4aa135185f5c01e3073bf4063faae271e6facc776d347c704718542a2b9b398916382ef1d40e755735d1846eb8b"}, @generic={0x0, 0x52, "4eac434e8377fe8f4c1a6bfe9f10d97ce8407cf27b1f2471e1bcf934829cb4422b7a650dd0cefcd237b80718d9f9677b0baf2123a1528caceea7c0f42224c107cbcd63d8a106d8c0b53d235294dfba398962"}]}}}], 0x268}, 0x0) 18:22:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000004e00)=@base={0x14}, 0x48) 18:22:18 executing program 0: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x8, 0x5}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 18:22:18 executing program 3: syz_emit_ethernet(0xe81, &(0x7f0000000540)={@local, @dev, @val={@void}, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x0, 0xe6f, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @loopback}, {{}, {}, {}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}}}, 0x0) 18:22:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x3, 0x0, 0x0) 18:22:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}}, 0x0) 18:22:18 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000340)={@empty, @rand_addr, @local}, 0xc) 18:22:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8918, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 18:22:18 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) getuid() 18:22:18 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80) 18:22:18 executing program 1: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x2, &(0x7f0000000140)) 18:22:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0xf}, {0xd, 0x5}]}]}}, &(0x7f0000000400)=""/252, 0x3e, 0xfc, 0x1}, 0x20) 18:22:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48) 18:22:18 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x6bd, 0x0, &(0x7f0000000200)) 18:22:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000001d80)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0}, 0x0) 18:22:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @timestamp, @mss, @mss], 0x4) 18:22:18 executing program 1: r0 = socket(0xa, 0x3, 0xd3) connect$netlink(r0, 0x0, 0x0) 18:22:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80) 18:22:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x1, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800, r0}, 0x38) 18:22:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x8932, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) 18:22:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 18:22:18 executing program 1: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) r1 = msgget(0x0, 0x80) r2 = msgget(0x3, 0x1) msgrcv(r2, &(0x7f0000000000)={0x0, ""/214}, 0xde, 0x1, 0x1000) r3 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000380)={'raw\x00', 0xa7, "02930ba379da3c411253ef41fc63787c8f78aaebfc5808d97f17894f1089ffca8c11981e9bd8665cb07b9d6bca563392002efa4bca0a989128f88808b692706ae4b5ae6049dc83d722d4ad4ab123f964cae07d31f60e73416e584c84c887d63e0765d349452f52e966526b5ff4d9bef844604c1f6f0ee01eb98ea11ed4d339ab5d2f6d07b9abf4d9cfb18f413ed6281f3e880e7a9fff2b0ea9cdecf9a0c24b96abde9306f8ec0c"}, &(0x7f0000000140)=0xcb) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000580)=""/254) msgrcv(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040424727a9c09afda6c8d998e53f34ee7bf5bb5654c9ff5d1c716bd427a086f8e9a4d2dd7820aac8f3225d81f58f824f22a2489e9873fc3eb32321403abddea895b285e160f345760d84910cf93bf5b445a58921b87160136b668e947ce4caa2752662772e7bb85c86ce9cfee4e287cb85b89f820b9c22d10e963f24773716a8a181f38eea3e049022c4b0a4a4d48064464cc8129fe7ee68245d605ff94e6b59566e8af88a8e7395c5bd7754f7b781c3af0a54"], 0xd6, 0x1, 0x3800) 18:22:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x1a) 18:22:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 18:22:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000004c0)=0x0) getpgrp(r1) 18:22:18 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x7}, 0x48) 18:22:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000007100), 0x9, 0x0) 18:22:18 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:22:18 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) 18:22:18 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x0, 0x0, 0xfffffffffffffe30) 18:22:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$tcp_congestion(r0, 0x0, 0x0) 18:22:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) 18:22:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_type(r0, 0x0, 0x0) 18:22:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 18:22:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 18:22:18 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) 18:22:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$char_usb(r0, 0x0, 0x0) 18:22:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') write$char_usb(r0, 0x0, 0x0) 18:22:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_pid(r0, 0x0, 0x0) 18:22:18 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 18:22:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x140) 18:22:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000007100), 0x0, 0x40) 18:22:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$char_usb(r0, 0x0, 0xd848f33b) 18:22:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x4000) 18:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$char_usb(r0, &(0x7f0000000000), 0x0) 18:22:19 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x20, 0x0) 18:22:19 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)) 18:22:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) 18:22:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001d00)=0x0) syz_open_procfs(r1, &(0x7f0000000080)='stat\x00') 18:22:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_type(r0, &(0x7f0000000000), 0x9) 18:22:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') write$cgroup_subtree(r0, 0x0, 0x0) 18:22:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f00000000c0)) 18:22:19 executing program 2: r0 = semget$private(0x0, 0x0, 0x621) semctl$IPC_RMID(r0, 0x0, 0x0) mq_open(&(0x7f0000000140)='-%\x00', 0x40, 0x0, &(0x7f0000000180)={0x4, 0x9, 0x4, 0x9}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) accept$inet6(r1, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000001c0)={0x8}, 0x4) r2 = semget(0x3, 0x4, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000000c0)=""/113) semctl$GETVAL(r2, 0x2, 0xc, &(0x7f0000000000)=""/88) semget(0x0, 0x0, 0x25) r3 = semget(0x0, 0x3, 0x40) semctl$IPC_RMID(r3, 0x0, 0x0) 18:22:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) 18:22:19 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) 18:22:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) 18:22:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_subtree(r0, 0x0, 0x0) 18:22:19 executing program 5: r0 = msgget(0x0, 0x0) msgrcv(r0, &(0x7f00000001c0)=ANY=[], 0xd6, 0x0, 0x3800) 18:22:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_pid(r0, 0x0, 0x4c) 18:22:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'net_cls'}]}, 0x9) 18:22:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$char_usb(r0, &(0x7f0000000000)="3780", 0x2) 18:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) 18:22:19 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) 18:22:19 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 18:22:19 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 18:22:19 executing program 3: setrlimit(0x9, &(0x7f0000000080)) 18:22:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') openat$cgroup_devices(r0, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) 18:22:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 18:22:19 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000007c0)) 18:22:19 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') 18:22:19 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 18:22:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, 0x0) 18:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) 18:22:19 executing program 4: open$dir(&(0x7f0000000480)='./file1\x00', 0x41, 0x8) 18:22:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:22:19 executing program 3: open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x0) open$dir(&(0x7f0000000080)='./file1\x00', 0x20c142, 0x150) 18:22:19 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, 0x0) 18:22:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, 0x0) 18:22:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) 18:22:19 executing program 3: ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) 18:22:19 executing program 2: mknodat$null(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x0, 0x103) 18:22:19 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) signalfd(r0, 0x0, 0x0) 18:22:19 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) 18:22:20 executing program 2: open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x40) 18:22:20 executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 18:22:20 executing program 1: mkdir(&(0x7f00000025c0)='./file0\x00', 0x28) 18:22:20 executing program 3: renameat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0) 18:22:20 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 18:22:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, 0x0) 18:22:20 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x0, 0x0) 18:22:20 executing program 1: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) 18:22:20 executing program 3: open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x0) open$dir(&(0x7f0000000000)='./file1\x00', 0x208042, 0x75) 18:22:20 executing program 2: r0 = inotify_init() ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) 18:22:20 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20c00, 0x0) 18:22:20 executing program 5: signalfd(0xffffffffffffffff, &(0x7f0000001240), 0x8) 18:22:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000000140)) 18:22:20 executing program 4: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) 18:22:20 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0x0, 0x0) 18:22:20 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000700)=[0xffffffffffffffff]) 18:22:20 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 18:22:20 executing program 2: rt_sigpending(&(0x7f0000000600), 0x8) 18:22:20 executing program 0: open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x14) 18:22:20 executing program 4: ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 18:22:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, 0x0) 18:22:20 executing program 3: io_submit(0x0, 0x1, &(0x7f0000001340)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 18:22:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 18:22:20 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x140400, 0x0) 18:22:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 18:22:20 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 18:22:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, 0x0) 18:22:20 executing program 3: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x5452, &(0x7f0000000040)) 18:22:20 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0) 18:22:20 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) 18:22:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00'}) 18:22:20 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 18:22:20 executing program 5: open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={{}, {0x0, 0x2710}}) 18:22:20 executing program 1: keyctl$KEYCTL_MOVE(0x2, 0x0, 0x0, 0x0, 0x0) 18:22:20 executing program 3: add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 18:22:20 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x15, 0x0, 0x0) 18:22:20 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0) 18:22:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1c, 0x0, "e7d51f23d36ff6335448f0a8fe30292bfd74a4ebfaa1aca55c9cbf745bdd550d692f2d411e63694eb00328c3d553639ed7c4132698d15f12991fae83e34ee356dd603170103978ad80aac69f9f13203e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000003100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "46041f3445c66f8752f6d98ee4569e5446bd0f739aba20f5ff81a336325b7e792a7f9f7e4d480afa9ff1efda32cfef1d0ffcbcef5d68471bc76da4a8cca586ff51c0b6998e43efc12139ef6fa997c8ba"}, 0xd8) 18:22:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x0, 0x0, 0x81}, 0x48) 18:22:20 executing program 4: syz_clone3(&(0x7f00000002c0)={0x11100a00, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 18:22:20 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x13, 0x0, 0x0) 18:22:20 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r2, @loopback, @private}, 0xc) 18:22:20 executing program 1: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 18:22:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:21 executing program 0: bpf$BPF_PROG_DETACH(0x23, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x6001a9a8d60addd5}, 0x10) 18:22:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000015c0)={0x8, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x3000, 0x66, &(0x7f0000001380)=""/102}, {0x5000, 0xed, &(0x7f0000001400)=""/237}, {0x4000, 0x4a, &(0x7f0000001540)=""/74}]}) 18:22:21 executing program 4: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$unlink(0x9, r3, r1) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x10, 0x0, 0x0) 18:22:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13}, 0x48) 18:22:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0xf, 0x0, 0x0) 18:22:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@delchain={0x1078, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_tcindex={{0xc}, {0x1048, 0x2, [@TCA_TCINDEX_ACT={0x1044, 0x7, [@m_police={0x1040, 0x0, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x3, 0x9, 0xffff25ee, 0x5c0, 0x2, 0x7ff, 0x3, 0x3, 0xfd, 0x0, 0x8e, 0x10000, 0x3, 0x0, 0xffffff58, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x6, 0x4, 0x8001, 0x80000000, 0x400, 0x8001]}, @TCA_POLICE_PEAKRATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1078}}, 0x0) 18:22:21 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x1a, 0x0, 0x0) 18:22:21 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0x8}, 0x48) 18:22:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x8, 0x8}, 0x48) 18:22:21 executing program 2: r0 = gettid() sched_setscheduler(r0, 0x0, &(0x7f00000006c0)=0xffff1ffc) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x22, 0x0, 0x0) 18:22:21 executing program 4: keyctl$KEYCTL_MOVE(0xc, 0x0, 0x0, 0x0, 0x0) 18:22:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@raw=[@generic={0x20}, @call, @exit], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x8f, &(0x7f00000000c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:21 executing program 3: keyctl$KEYCTL_MOVE(0x12, 0x0, 0x0, 0x0, 0x0) 18:22:21 executing program 2: keyctl$KEYCTL_MOVE(0xf, 0x0, 0x0, 0x0, 0x0) 18:22:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)={0x0, {{0x2, 0x0, @private}}, 0x0, 0x2, [{{0x2, 0x0, @remote}}, {{0x2, 0x0, @private}}]}, 0x190) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0xd, 0x0, 0x0) 18:22:21 executing program 3: bpf$MAP_CREATE(0x1d, &(0x7f0000000080), 0x48) 18:22:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) 18:22:21 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x2a, 0x0, 0x0) 18:22:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000007c0), 0x4) 18:22:21 executing program 2: bpf$BPF_PROG_DETACH(0x7, &(0x7f0000000000), 0x10) 18:22:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x40, 0x4) 18:22:21 executing program 4: keyctl$KEYCTL_MOVE(0x14, 0x0, 0x0, 0x0, 0x0) 18:22:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x14, 0x0, 0x0) 18:22:21 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x4, 0x0, 0x0) 18:22:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000280)=0x5, 0x4) 18:22:21 executing program 5: bpf$BPF_PROG_DETACH(0x1e, &(0x7f0000000000), 0x10) 18:22:21 executing program 3: r0 = gettid() ptrace$getsig(0x4202, r0, 0x0, 0x0) 18:22:21 executing program 4: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x84) 18:22:21 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x1600bd7e, 0x0, 0x0) 18:22:21 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x12, 0x0, 0x0) 18:22:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @mcast1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 18:22:21 executing program 5: add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r0) 18:22:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x5, r0, 0x0) 18:22:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1c, 0x0, "e7d51f23d36ff6335448f0a8fe30292bfd74a4ebfaa1aca55c9cbf745bdd550d692f2d411e63694eb00328c3d553639ed7c4132698d15f12991fae83e34ee356dd603170103978ad80aac69f9f13203e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000003100)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x1, 0x0, "46041f3445c66f8752f6d98ee4569e5446bd0f739aba20f5ff81a336325b7e792a7f9f7e4d480afa9ff1efda32cfef1d0ffcbcef5d68471bc76da4a8cca586ff51c0b6998e43efc12139ef6fa997c8ba"}, 0xd8) 18:22:21 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x8000000) 18:22:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="1f74b2e21d5ca5df995703b61b57ce229a87da44941e8f0dce9b61b39add5dc49b9286055f358afa2df3ab3afdfe3924aaab34f18ba8", 0x36}], 0x1, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) 18:22:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x88, 0x8, 0x0, 0x0) 18:22:21 executing program 1: bpf$MAP_CREATE(0x15, &(0x7f0000000080), 0x48) 18:22:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev, @mcast1, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 18:22:21 executing program 3: syz_clone3(&(0x7f0000000d80)={0x10020000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0x0], 0x1}, 0x58) 18:22:21 executing program 4: bpf$BPF_PROG_DETACH(0x10, &(0x7f0000000000), 0x10) 18:22:22 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x8002, 0x0) 18:22:22 executing program 5: bpf$BPF_PROG_DETACH(0x16, &(0x7f0000000000), 0x10) 18:22:22 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2}}) 18:22:22 executing program 2: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff}, 0xc) 18:22:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{}, "96611f0379799431", "290b2ee5610def50f917533306cd60a346f0bd789deb61edaad76748c89daccc", "98a5c519", "b049df9cd9fe4799"}, 0x38) 18:22:22 executing program 4: capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) 18:22:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="94", 0x1, r0) 18:22:22 executing program 1: bpf$BPF_PROG_DETACH(0x3, 0x0, 0x0) 18:22:22 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af04, 0x0) 18:22:22 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x6) [ 486.033727][T21152] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 18:22:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2}}) 18:22:22 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2db4f1bbd63a9e1d) 18:22:22 executing program 3: bpf$BPF_PROG_DETACH(0x12, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x6001a9a8d60addd5}, 0x10) 18:22:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001400)) 18:22:22 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x11, r0, 0x0) 18:22:22 executing program 2: pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000440)={0x7, 0x6d, 0x2}, 0x7) 18:22:22 executing program 5: socketpair(0x0, 0x8000f, 0x0, &(0x7f0000000180)) 18:22:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x6, r0, r1) 18:22:22 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x19, 0x0, 0x0) 18:22:22 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 18:22:22 executing program 2: syz_io_uring_setup(0x1c5f, &(0x7f0000000040), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x6539, &(0x7f0000000140), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:22:22 executing program 5: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000240)) 18:22:22 executing program 1: add_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0xfffffffffffffe54, 0x0) 18:22:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$P9_RLCREATE(r0, 0x0, 0x0) 18:22:22 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x18, 0x0, 0x0) 18:22:22 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x6, 0x0, 0x0) 18:22:22 executing program 3: bpf$BPF_PROG_DETACH(0xe, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x6001a9a8d60addd5}, 0x10) 18:22:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x88) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) dup3(r1, r0, 0x0) 18:22:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 18:22:22 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) dup3(r0, r1, 0x0) 18:22:22 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0x0, 0x0) 18:22:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000000)=@raw=[@call, @exit], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x8f, &(0x7f00000000c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x1c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x32, 0x0, 0x0) 18:22:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6ca, &(0x7f0000000000)=0x40, 0x4) 18:22:22 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000c80)={0x28, 0x0, 0x0, @local}, 0x10) 18:22:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x5, 0x0, 0x0) 18:22:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) 18:22:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000280), 0x4) 18:22:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2, &(0x7f0000000000)=@raw=[@generic, @exit], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x8f, &(0x7f00000000c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:22 executing program 1: bpf$BPF_PROG_DETACH(0xe, &(0x7f0000000040)={@map=0x1, 0xffffffffffffffff, 0x0, 0x7}, 0x10) 18:22:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x31, 0x0, 0x0) 18:22:23 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x3) 18:22:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f00000003c0)={'vlan0\x00', @ifru_data=0x0}) 18:22:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af20, &(0x7f00000000c0)) 18:22:23 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)) 18:22:23 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_pktinfo(r0, 0x0, 0x16, 0x0, 0x0) 18:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @empty}}}}) bpf$BPF_PROG_DETACH(0x78, 0x0, 0xffffffffffffff37) 18:22:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000340)='ceph\x00', &(0x7f0000000380)='NLBL_CIPSOv4\x00') 18:22:23 executing program 1: bpf$BPF_PROG_DETACH(0x1b, 0x0, 0x0) 18:22:23 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) 18:22:23 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) 18:22:23 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0xb6, &(0x7f00000001c0)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000080)='S', 0x1}, {&(0x7f0000000240)="03", 0x1}, {&(0x7f0000001240)='@', 0x1}], 0x3}, 0x0) 18:22:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000007c0)=0x3, 0x4) 18:22:23 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) 18:22:23 executing program 2: clock_getres(0xa10181d0818ca1aa, 0x0) 18:22:23 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4004af07, &(0x7f00000000c0)) 18:22:23 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000015c0)={0x6, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x3000, 0x66, &(0x7f0000001380)=""/102}, {0x4000, 0x0, 0x0}]}) 18:22:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$unlink(0x9, r4, r1) keyctl$unlink(0x9, r2, r3) 18:22:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x0, 0x0, 0x8f4}, 0x48) 18:22:23 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x88, 0x8, 0x0, 0x300) 18:22:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x7ff, 0xd0, &(0x7f00000000c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:23 executing program 5: syz_io_uring_setup(0x8001c5f, &(0x7f0000000040)={0x0, 0x84, 0x1c}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) 18:22:23 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0xffff}, 0x48) 18:22:23 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0xe, r0, 0x0) 18:22:23 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x19, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:23 executing program 4: add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) 18:22:23 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x18, 0x0, r0) 18:22:23 executing program 0: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, r2) 18:22:23 executing program 2: socketpair(0x26, 0x0, 0x0, &(0x7f0000000140)) 18:22:23 executing program 5: sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0xcdc9822698d8ecd8) 18:22:23 executing program 3: keyctl$KEYCTL_MOVE(0x1c, 0x0, 0x0, 0x0, 0x0) 18:22:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 18:22:23 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x0, 0x8f4}, 0x48) 18:22:23 executing program 0: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000640)=@l2={{0x0, 0x2e, 0x0, 0x2e, 0x0, 0x2e, 0x0, 0x2f}, 0x2f, 0x0, 0x20, '\xa2*'}, 0x6d) 18:22:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0xff81}) 18:22:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5414, 0x0) 18:22:23 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x20200, 0x0) 18:22:23 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff) 18:22:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540d, 0x0) 18:22:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x40049409, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:23 executing program 4: syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x4101) 18:22:23 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000080), 0x6) 18:22:24 executing program 2: sched_getattr(0x0, &(0x7f0000002c80)={0x38}, 0x38, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 18:22:24 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x70000e84) 18:22:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x1ff, 0x0, 0x20, 0x1}) 18:22:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:24 executing program 4: socketpair(0x2, 0x2, 0x3, &(0x7f0000000040)) 18:22:24 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$smackfs_netlabel(r0, 0x0, 0x0) 18:22:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b31, 0x0) 18:22:24 executing program 2: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, 0x0, 0x0) 18:22:24 executing program 1: r0 = inotify_init() ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 18:22:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x802c542a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:24 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40305829, 0x0) 18:22:24 executing program 3: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x5452, &(0x7f00000011c0)=ANY=[]) 18:22:24 executing program 1: syz_open_dev$vcsn(&(0x7f0000002100), 0x6c3, 0x0) select(0x40, &(0x7f0000000000)={0x9}, &(0x7f0000000040)={0x2}, 0x0, 0x0) 18:22:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b65, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x9}]}) 18:22:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000200)="14", 0x1, r0) r1 = add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='\f', 0x1, r0) keyctl$search(0xa, r1, &(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0) 18:22:24 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0xc0c0583b, 0x0) 18:22:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) 18:22:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5427, 0x0) 18:22:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b30, 0x0) 18:22:24 executing program 1: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, 0x0, 0x6d) 18:22:24 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x138) 18:22:24 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40286608, 0x0) 18:22:24 executing program 4: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x3, &(0x7f0000000040), 0x0) 18:22:24 executing program 0: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040), 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044800}, 0x4008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x9, 0x0, &(0x7f0000001680), 0x4, &(0x7f00000016c0)={[{@shortname_mixed}, {@rodir}, {@nonumtail}, {@shortname_win95}, {@shortname_winnt}, {@shortname_lower}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'team_slave_1\x00'}}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x44000022}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:22:24 executing program 2: keyctl$search(0xa, 0x0, &(0x7f0000000340)='.dead\x00', 0x0, 0x0) 18:22:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5456, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:24 executing program 5: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, &(0x7f0000000040), 0x0) 18:22:24 executing program 4: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) [ 488.575535][T21370] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value 18:22:24 executing program 2: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x10000004}, 0x0) 18:22:24 executing program 1: add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0xfffff, 0xffffffffffffffff) 18:22:24 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, r1) 18:22:24 executing program 3: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 18:22:24 executing program 4: add_key$keyring(&(0x7f0000000280), 0x0, 0x20000000, 0x2000, 0xffffffffffffffff) 18:22:24 executing program 5: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x4, &(0x7f00000016c0)) 18:22:24 executing program 2: syz_clone(0x2b68700, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:24 executing program 1: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) read$FUSE(r0, 0x0, 0x0) 18:22:24 executing program 0: syz_io_uring_setup(0x93b, &(0x7f0000000a40), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000ac0), 0x0) syz_io_uring_setup(0x2410, &(0x7f0000000000), &(0x7f0000afc000/0x2000)=nil, &(0x7f0000e53000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:22:25 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x401c5820, 0x0) 18:22:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast=0x8000000}}]}, 0x40}, 0x1, 0x7}, 0x0) 18:22:25 executing program 4: shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffb000/0x3000)=nil) 18:22:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x211b1c19, 0x0, 0x0, "07f88d621cfa80f8f38e39fca1cb777d2a53de"}) 18:22:25 executing program 2: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xc, 0x0, 0x0) 18:22:25 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$P9_RCLUNK(r0, 0x0, 0x0) 18:22:25 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=@l1={{}, 0x20, '/sys/fs/smackfs/netlabel\x00'}, 0x4c) 18:22:25 executing program 3: syz_io_uring_setup(0x4bb5, &(0x7f0000000000), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:22:25 executing program 4: syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x6280) 18:22:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x80045440, 0x0) 18:22:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0xaf, 0x20, 0x1, 0x1ff}) 18:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x541a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5605, 0x0) 18:22:25 executing program 4: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="fb", 0x1, 0xfffffffffffffffb) 18:22:25 executing program 2: socketpair(0x2, 0x801, 0x0, &(0x7f0000000080)) 18:22:25 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x6609, 0x0) 18:22:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b62, 0x0) 18:22:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b71, 0x0) 18:22:25 executing program 4: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, 0x0, 0x0) 18:22:25 executing program 5: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 18:22:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$smackfs_labels_list(r0, &(0x7f0000000000)={[{'$:-*}\n+,@/'}]}, 0xc) 18:22:25 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000003"]) 18:22:25 executing program 3: syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) 18:22:25 executing program 0: futex(&(0x7f0000000080), 0x4, 0x0, 0x0, &(0x7f0000000180), 0x1) 18:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x1e00, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:25 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xbcf17c36e204a679, 0xffffffffffffffff, 0x8000000) 18:22:25 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000001800)) 18:22:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 18:22:25 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00}}, 0xa0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xa0) 18:22:25 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/193) 18:22:25 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x6628, 0x0) 18:22:25 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40305828, 0x0) 18:22:25 executing program 2: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='00000000000000000000.00000000000000000004.000000000000000000f'], 0x6d) 18:22:25 executing program 1: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r0) 18:22:25 executing program 1: add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 18:22:25 executing program 3: r0 = socket$inet(0x2, 0x3, 0xff) sendmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x168}}], 0x1, 0x0) 18:22:25 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x6612, 0x0) 18:22:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4080008) 18:22:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:25 executing program 3: syz_clone(0x0, 0x0, 0xfffffffffffffcb2, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540c, 0x0) 18:22:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x92000000, 0x0, 0x0, "a919d810b4f102afea4bd519d4dd672f84b857"}) 18:22:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 18:22:26 executing program 2: migrate_pages(0x0, 0x81, 0x0, &(0x7f0000000500)) 18:22:26 executing program 5: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x3000000) 18:22:26 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) 18:22:26 executing program 3: getrusage(0x1, 0x0) 18:22:26 executing program 1: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)) 18:22:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x600) 18:22:26 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[]) 18:22:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b32, 0x0) 18:22:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x80045438, 0x0) 18:22:26 executing program 1: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x8, &(0x7f0000000040)=[{0x0}], 0x1) 18:22:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5410, 0x0) 18:22:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:26 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d0"}}, 0x119) 18:22:26 executing program 3: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, r0) 18:22:26 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00'}}, 0x118) 18:22:26 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x13, 0xa, 0x3}, 0x14}}, 0x0) [ 490.407059][ T3673] hid-generic 0000:0000:0000.0004: unknown main item tag 0xd 18:22:26 executing program 1: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040)={0xc, {0xfbb, "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"}}, 0xfc1) getrusage(0x1, &(0x7f0000001740)) 18:22:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5407, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b62, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) [ 490.493579][ T3673] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 18:22:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b36, 0x0) 18:22:26 executing program 5: r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_labels_list(r0, 0x0, 0xa6) 18:22:26 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b2f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43cf525695f1e21548e35959093"}) 18:22:26 executing program 3: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r0, 0x0) 18:22:26 executing program 1: syz_io_uring_setup(0xcbb5, &(0x7f0000002080)={0x0, 0x0, 0x10}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) 18:22:26 executing program 5: syz_io_uring_setup(0x93b, &(0x7f0000000a40), &(0x7f0000e70000/0xa000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 18:22:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3b, 0x0) 18:22:26 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 18:22:26 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:26 executing program 3: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)) 18:22:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x40) 18:22:27 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0xc028660f, 0x0) 18:22:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b6b, &(0x7f0000000040)={0x0, 0x0, 0x33b3b187, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 4: syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5460, 0x0) 18:22:27 executing program 5: add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x2000, 0xffffffffffffffff) [ 490.951625][T21565] FAT-fs (loop3): bogus number of reserved sectors [ 490.977581][T21565] FAT-fs (loop3): Can't find a valid FAT filesystem 18:22:27 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000001, 0xffffffffffffffff) 18:22:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b61, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5601, 0x0) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 3: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000040)=[{}], 0x1) 18:22:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1439c1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x6609, 0x0) 18:22:27 executing program 2: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4b, 0x0) 18:22:27 executing program 4: r0 = syz_io_uring_setup(0x1e40, &(0x7f0000000580), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600), &(0x7f0000000640)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1) 18:22:27 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0), 0x0, 0x6100) 18:22:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1ff, 0x9}) 18:22:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b6b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 3: select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x2710}) 18:22:27 executing program 4: shmget(0x0, 0x1000, 0x1, &(0x7f0000ffb000/0x1000)=nil) 18:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 18:22:27 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 2: syz_io_uring_setup(0x620d, &(0x7f0000000000), &(0x7f0000e98000/0x4000)=nil, &(0x7f0000dd6000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 18:22:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b31, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f000000a000)='.\x00', 0x0, 0x0) 18:22:27 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40086602, 0x0) 18:22:27 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88202, 0x0) 18:22:27 executing program 1: r0 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$smackfs_ptrace(r0, 0x0, 0x0) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 2: fanotify_mark(0xffffffffffffffff, 0x1fc8067eb7250da5, 0x0, 0xffffffffffffffff, 0x0) 18:22:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5411, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5423, 0x0) 18:22:27 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrusage(0x1, &(0x7f0000001740)) 18:22:27 executing program 5: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x75340fbb1ce0b4f3, 0xffffffffffffffff, 0x8000000) 18:22:27 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:27 executing program 2: io_uring_setup(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f000000a000)='.\x00', 0x142, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:27 executing program 1: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000640)=@l2={{}, 0x2f, 0x0, 0x2f, '\xa2*'}, 0x6d) 18:22:27 executing program 4: r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r0, 0x0, 0x42) 18:22:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b69, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:28 executing program 2: sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[{@shortname_mixed}, {@shortname_winnt}]}) getrusage(0x1, &(0x7f0000001740)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18:22:28 executing program 4: write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040), 0x6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044800}, 0x4008000) syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x9, 0x0, &(0x7f0000001680), 0x4, &(0x7f00000016c0)={[{@shortname_mixed}, {@rodir}, {@shortname_win95}, {@shortname_winnt}, {@shortname_lower}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'team_slave_1\x00'}}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x44000022}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x70, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:22:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5409, 0x0) 18:22:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, 0xd, 0xa, 0x301}, 0x14}}, 0x0) 18:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) [ 492.031947][T21655] FAT-fs (loop2): bogus number of reserved sectors [ 492.066227][T21655] FAT-fs (loop2): Can't find a valid FAT filesystem [ 492.076232][T21658] FAT-fs (loop4): bogus number of reserved sectors 18:22:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5413, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0xc0189436, &(0x7f0000000000)) 18:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 492.117656][T21658] FAT-fs (loop4): Can't find a valid FAT filesystem 18:22:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 5: futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000180), 0x0) 18:22:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5411, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) 18:22:28 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x660c, 0x0) 18:22:28 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x3) read$smackfs_ptrace(r0, 0x0, 0x0) 18:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:28 executing program 1: syz_io_uring_setup(0x704d, &(0x7f0000000140)={0x0, 0xbda3, 0x1e, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:22:28 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5412, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffff7, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:28 executing program 3: add_key$keyring(&(0x7f0000000280), 0x0, 0x20000000, 0xfffff, 0xffffffffffffffff) 18:22:28 executing program 2: syz_clone(0xa1d2e73faaa0750e, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:28 executing program 4: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xb, 0x0, 0x0) 18:22:28 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:28 executing program 5: socketpair(0x10, 0x3, 0x1, &(0x7f00000000c0)) 18:22:28 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00}}, 0xa0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xfdef) 18:22:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x540f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:28 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0) 18:22:28 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:28 executing program 3: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00}}, 0xa0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xa0) 18:22:28 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40046629, 0x0) 18:22:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x540f, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:28 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5419, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:29 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x80045432, 0x0) 18:22:29 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setgid(0xee00) migrate_pages(r0, 0x4, 0x0, 0x0) 18:22:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) 18:22:29 executing program 5: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 18:22:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5606, 0x0) 18:22:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:29 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46142, 0x0) 18:22:29 executing program 4: migrate_pages(0x0, 0x1f, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x1) 18:22:29 executing program 3: select(0xffffff10, &(0x7f0000000000), &(0x7f0000000040), 0x0, 0x0) 18:22:29 executing program 5: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, 0x0, 0x0) 18:22:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x1) 18:22:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:29 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x5421, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) [ 493.140413][ T25] audit: type=1800 audit(1644862949.268:14): pid=21744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1172 res=0 errno=0 18:22:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x40045436, 0x0) 18:22:29 executing program 5: io_uring_setup(0x88d, &(0x7f0000000440)={0x0, 0xb2ca, 0xe, 0x3}) 18:22:29 executing program 3: add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="e6", 0x1, 0xfffffffffffffffb) 18:22:29 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0x280040) 18:22:29 executing program 1: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00}}, 0xa0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xfffffdef) 18:22:29 executing program 3: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, &(0x7f0000000040)=[{0x0}], 0x1) 18:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="fb07000000000000799c06"], 0x14}}, 0x0) 18:22:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x801}, 0x14}}, 0x0) 18:22:29 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0xffffffffffffffff) 18:22:29 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5414, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:29 executing program 5: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, 0x0, 0x0) 18:22:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0xaf, 0x20, 0x1, 0x1ff, 0x9}) 18:22:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) 18:22:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4e, 0x0) 18:22:29 executing program 2: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) 18:22:29 executing program 5: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x2, 0x0, 0x0) 18:22:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffe) 18:22:30 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x101) write$P9_RRENAMEAT(r0, &(0x7f0000000380)={0x7}, 0x7) 18:22:30 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40305839, 0x0) 18:22:30 executing program 3: request_key(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='blacklist\x00', 0x0) 18:22:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) 18:22:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b6d, 0x0) 18:22:30 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40086607, 0x0) 18:22:30 executing program 2: pselect6(0xb, &(0x7f00000002c0)={0x200}, 0x0, 0x0, 0x0, 0x0) 18:22:30 executing program 4: select(0x40, &(0x7f0000000000)={0x3}, &(0x7f0000000040)={0x2}, 0x0, 0x0) 18:22:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5409, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, 0x0, 0x0) 18:22:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffe) 18:22:30 executing program 2: syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x5504a92722070ece) 18:22:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b64, 0x0) 18:22:30 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000}]}) ioctl$UDMABUF_CREATE_LIST(r0, 0xc0189436, &(0x7f0000000000)=ANY=[]) 18:22:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b71, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x80045438, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 18:22:30 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x40086604, 0x0) 18:22:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) 18:22:30 executing program 4: setgid(0xee00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) 18:22:30 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x6100) 18:22:30 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5600, 0x0) 18:22:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 18:22:31 executing program 1: add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 18:22:31 executing program 4: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=']((,%-\x00', 0x0) [ 494.956660][T21831] EXT4-fs warning (device sda1): __ext4_ioctl:1176: Setting inode version is not supported with metadata_csum enabled. 18:22:31 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, 0x0) 18:22:31 executing program 3: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) 18:22:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 18:22:31 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5404, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 18:22:31 executing program 5: request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)='[%.:\x00', 0xfffffffffffffffd) 18:22:31 executing program 3: futex(&(0x7f0000000080), 0xb, 0x0, 0x0, &(0x7f0000000180), 0x0) 18:22:31 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, 0x0) 18:22:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:22:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x1ff}) 18:22:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x1, 0x1410000}) 18:22:31 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5437, 0x0) 18:22:31 executing program 4: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 18:22:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541a, 0x0) 18:22:31 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="fb"], 0x14}}, 0x0) 18:22:31 executing program 2: request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0xffffffffffffffff) 18:22:31 executing program 1: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x5, &(0x7f0000000040), 0x0) 18:22:32 executing program 3: syz_clone(0xab40600, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:32 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 18:22:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 18:22:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x1ff, 0x9}) 18:22:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:32 executing program 1: memfd_create(&(0x7f00000000c0)='\x86v\xc9{\xc3\x9dbVS\xb3\xa3\x89\xcb\xc65z1\xc7\xa8F\x8eg\xd3\x16\xa0\xf4M\xd8{=\xfb\\\xff\x13\b\xdc\xfb\xban\x97\xf8\xf1\x95\xfa\x81\xd1\xca8\xfb\x90\xe3Z\x13\xb5.\x12t\xdd\xa1\xaf\xb6\xbf\xd9\xf6([\x1ak\x1f\x19\xdd\x84\xccs\xc9E\xd3\xe7\x82\x9drH\x8cI\xdd)\xadM)&\xcf\x03.\x1bN\x0er\r\f,\x80\x9f', 0x0) 18:22:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)) 18:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5603, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:32 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5}, 0x0, &(0x7f0000000240)={0x8}, &(0x7f00000002c0), 0x0) 18:22:32 executing program 1: socketpair(0x2, 0x801, 0x4, &(0x7f0000000080)) 18:22:32 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) 18:22:32 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x1}) 18:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5421, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540f, 0x0) 18:22:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x541d, 0x0) 18:22:32 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) 18:22:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4d, 0x0) 18:22:32 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x801}, 0x14}}, 0x0) 18:22:32 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 18:22:33 executing program 5: syz_io_uring_setup(0x704d, &(0x7f0000000140)={0x0, 0xbda3, 0x1e, 0x0, 0xffffffff}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:22:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5406, 0x0) 18:22:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5412, 0x0) 18:22:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000002100), 0x1, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x8000000) 18:22:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5609, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2}, 0x14}}, 0x0) 18:22:33 executing program 5: syz_clone(0x70008000, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x545d, 0x0) 18:22:33 executing program 4: futex(&(0x7f0000000080), 0x4, 0x0, 0x0, &(0x7f0000000180), 0x0) 18:22:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b66, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2}, 0x14}}, 0x0) 18:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x545d, 0x0) 18:22:33 executing program 3: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f0000000040)=[{0x0}], 0x1) 18:22:33 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b44, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 2: r0 = syz_clone(0x0, 0x0, 0xfffffffffffffcb2, 0x0, 0x0, 0x0) migrate_pages(r0, 0x4, 0x0, &(0x7f0000001800)=0x81) 18:22:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2}, 0x14}}, 0x0) 18:22:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5410, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x40045431, 0x0) 18:22:33 executing program 0: request_key(&(0x7f0000000300)='.request_key_auth\x00', 0x0, 0x0, 0x0) 18:22:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a3100000000000000000000000000000000000000000000000000000000000000e6ffffff000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000008495000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x138) 18:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b33, 0x0) 18:22:33 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/4096, 0x1000) 18:22:33 executing program 3: syz_open_dev$vcsa(&(0x7f0000000440), 0xfffffffffffffe01, 0x181343) 18:22:33 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[]) 18:22:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x540b, 0x0) 18:22:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0004"], 0xe5) 18:22:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b2f, 0x0) 18:22:33 executing program 2: migrate_pages(0x0, 0x8000, 0x0, &(0x7f0000000040)) 18:22:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x0, 0x1ff, 0x9}) 18:22:33 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5414, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:33 executing program 0: syz_io_uring_setup(0x9, &(0x7f0000000140), &(0x7f0000f20000/0x1000)=nil, &(0x7f00008dd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) 18:22:33 executing program 5: io_uring_setup(0x603a, &(0x7f0000002740)={0x0, 0xd73c, 0x48}) 18:22:33 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 4: munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_io_uring_setup(0xd3b, &(0x7f0000000080)={0x0, 0x8a44, 0x8}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 18:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b45, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept$inet(0xffffffffffffffff, 0x0, 0x0) 18:22:33 executing program 5: mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88202, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0x0) 18:22:33 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5425, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:33 executing program 1: syz_io_uring_setup(0xb406, &(0x7f0000000240)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000100)) 18:22:34 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$tcp_mem(r0, 0x0, 0x0) 18:22:34 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f00000010c0), 0x0, 0x9, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000001100)=""/4096, 0x1000, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002100)=@generic={0x8, "e7e367098f5ac44a2a7064d0a8214989ebee0f2c3d826577552c0927adf2ce5739c59733149011461d03132153bb897b418d6cf7269d072e29e248bc561f0ac74ac5e294e53f95b0f3b9795540a542a3e819e09e99d7a1e4660830866ac37685820711f9e85c050b0691fecc1a03e275dce6b2969df549c4116814b024fd"}, 0x80, 0x0, 0x0, &(0x7f00000022c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x20004000) r0 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x20002, &(0x7f00000023c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_gt}]}}) renameat(r0, &(0x7f00000024c0)='./file0\x00', 0xffffffffffffff9c, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_mark(r1, 0x10, 0xc0000002, r0, 0x0) socket(0x3, 0x80000, 0x0) r2 = socket(0x3b, 0x0, 0x7fff0) syz_genetlink_get_family_id$gtp(&(0x7f0000002600), r2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002680), 0x100, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 18:22:34 executing program 2: r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) write$smackfs_cipsonum(r0, &(0x7f0000000080), 0x14) 18:22:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b33, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000001640)='.\x00', 0x9, 0x0, &(0x7f0000001680), 0x0, 0x0) 18:22:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x540b, 0x0) 18:22:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80086601, 0x0) 18:22:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:34 executing program 0: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, &(0x7f0000000040)=[{}], 0x1) 18:22:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 5: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)) 18:22:34 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) pselect6(0x40, &(0x7f00000002c0)={0x200}, 0x0, 0x0, 0x0, 0x0) 18:22:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x44000022}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x14}, 0x14}}, 0x0) 18:22:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4a, 0x0) 18:22:34 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x0, 0x0) read$smackfs_ptrace(r0, &(0x7f00000000c0), 0x14) 18:22:34 executing program 0: timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_delete(r0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_rr_get_interval(0xffffffffffffffff, &(0x7f00000001c0)) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {r1, r2+10000000}}, &(0x7f0000000140)) r3 = syz_open_pts(0xffffffffffffffff, 0x220401) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000180)) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4208, r4) 18:22:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:22:34 executing program 1: r0 = openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_labels_list(r0, 0x0, 0x0) 18:22:34 executing program 2: r0 = syz_io_uring_setup(0x93b, &(0x7f0000000a40), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20013, r0, 0x8000000) 18:22:34 executing program 3: syz_io_uring_setup(0x185e, &(0x7f00000006c0), &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0) 18:22:34 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5416, 0x0) 18:22:34 executing program 5: futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0), 0x0) 18:22:34 executing program 4: syz_mount_image$vfat(&(0x7f0000001600), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)) 18:22:34 executing program 2: add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 18:22:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5423, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0xc0185879, 0x0) 18:22:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect(r0, &(0x7f00000004c0)=@in={0x2, 0x0, @private=0xa010101}, 0x80) 18:22:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5424, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xfffffdef) 18:22:34 executing program 1: r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_change_rule(r0, &(0x7f0000000040)={',', 0x20, '@\'+\'!&a\x16', 0x20, '-', 0x20, 'wbl'}, 0x11) 18:22:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 5: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15) 18:22:34 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0, 0x0, &(0x7f0000002080)) 18:22:34 executing program 4: clock_gettime(0xc408ec14c16f600b, 0x0) 18:22:34 executing program 1: futex(&(0x7f0000000080)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 18:22:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5602, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b52, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:34 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b37, 0x0) 18:22:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b49, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:35 executing program 5: select(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100), &(0x7f0000000180)) 18:22:35 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100", @ANYRES32]) 18:22:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5419, 0x0) 18:22:35 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1}) 18:22:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5424, 0x0) 18:22:35 executing program 5: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0) 18:22:35 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5405, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 18:22:35 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x801c581f, 0x0) 18:22:35 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5425, 0x0) 18:22:35 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002580), 0x0, 0x0) fanotify_mark(r0, 0x1, 0x1001, 0xffffffffffffffff, 0x0) 18:22:35 executing program 0: futex(&(0x7f0000000080), 0x6, 0x0, 0x0, 0x0, 0x0) 18:22:35 executing program 3: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_lower}]}) 18:22:35 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, r1+60000000}}, 0x0) 18:22:35 executing program 5: syz_open_dev$vcsn(&(0x7f0000002100), 0x0, 0x148c2) 18:22:35 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0xc020662a, 0x0) 18:22:35 executing program 0: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x4, 0x0, 0x0) 18:22:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5600, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) [ 499.822471][T22116] FAT-fs (loop3): bogus number of reserved sectors 18:22:36 executing program 2: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, r1+60000000}}, 0x0) 18:22:36 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b6a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:36 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0}, 0xfffffffffffffdef) [ 499.883250][T22116] FAT-fs (loop3): Can't find a valid FAT filesystem 18:22:36 executing program 1: openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:22:36 executing program 3: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[{@shortname_win95}, {@shortname_winnt}, {@shortname_lower}]}) 18:22:36 executing program 0: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0xa, 0x0, 0x0) 18:22:36 executing program 2: symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xfffffffffffffffd) 18:22:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x80045439, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, "dc1c692fe298115c69142d4aaa82b771963754"}) 18:22:36 executing program 1: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x6611, 0x0) 18:22:36 executing program 4: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_netlabel(r0, 0x0, 0x6d) 18:22:36 executing program 0: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000), 0x2000000}], 0x1) [ 500.142155][T22141] FAT-fs (loop3): bogus number of reserved sectors 18:22:36 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000004d40), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000004dc0)={0xffffffffffffffff, 0x0, 0x0, 0x2000}) 18:22:36 executing program 1: syz_clone(0xc0001000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) [ 500.213179][T22141] FAT-fs (loop3): Can't find a valid FAT filesystem 18:22:36 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000640)=@l2={{0x0, 0x2e, 0x0, 0x2e, 0x0, 0x2e, 0x0, 0x2d}, 0x2f, 0x0, 0x20, '\xa2*'}, 0x6d) 18:22:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5405, 0x0) 18:22:36 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\v'], 0x138) 18:22:36 executing program 3: r0 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 18:22:36 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1639c0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80086603, 0x0) 18:22:36 executing program 3: sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x0, 0x1}, 0x0) 18:22:36 executing program 4: add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='{})-/%%\xc8%^][\'&\'\x00', 0x0) 18:22:36 executing program 2: syz_io_uring_setup(0x620d, &(0x7f0000000000), &(0x7f0000e98000/0x4000)=nil, &(0x7f0000dd6000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5b7a, &(0x7f0000000a40), &(0x7f0000a6e000/0x1000)=nil, &(0x7f0000861000/0x1000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 18:22:36 executing program 1: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000), 0x4000000}], 0x1) 18:22:36 executing program 4: r0 = syz_io_uring_setup(0x3406, &(0x7f0000000240), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x300, 0x0, 0x0) 18:22:36 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b60, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:36 executing program 5: sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x9, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'team_slave_1\x00'}}]}) getrusage(0x0, 0x0) 18:22:36 executing program 2: syz_io_uring_setup(0x47f7, &(0x7f0000002080), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:36 executing program 3: syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f00000016c0)={[{@nonumtail}, {@shortname_win95}, {@shortname_lower}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 500.705509][T22178] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 18:22:36 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b4b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2081, 0x0) write$char_usb(r0, &(0x7f0000000180)='\a', 0x1) 18:22:36 executing program 0: r0 = syz_clone(0x0, 0x0, 0xfffffffffffffcb2, 0x0, 0x0, 0x0) migrate_pages(r0, 0x4, 0x0, &(0x7f0000001800)=0x81) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) gettid() getpgid(r0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, &(0x7f0000000180), 0x20000000, 0x0) 18:22:36 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0) getrusage(0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) 18:22:36 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$smackfs_labels_list(r0, 0x0, 0x0) 18:22:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5607, 0x0) 18:22:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b32, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:37 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b41, 0x0) 18:22:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3a, 0x0) 18:22:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5603, 0x0) 18:22:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}}, 0x0) 18:22:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x541d, 0x0) 18:22:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000002280)={'\x00', 0x0, 0x1}) 18:22:37 executing program 0: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xa8c14ae7fed46c0e) 18:22:37 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)=""/101) 18:22:37 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x161502) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7}, 0x7) 18:22:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:37 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000000)='/dev/udmabuf\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1}) 18:22:37 executing program 1: syz_clone(0xc0001000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 18:22:37 executing program 5: getrusage(0x0, &(0x7f0000001740)) 18:22:37 executing program 2: r0 = timerfd_create(0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x541b, 0x0) 18:22:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x560b, 0x0) 18:22:37 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = memfd_create(&(0x7f0000000000)='/dev/udmabuf\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1}) 18:22:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2081, 0x0) write$char_usb(r0, 0x0, 0x0) [ 501.349454][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.357907][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 18:22:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4bfa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:37 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) migrate_pages(0x0, 0x205, &(0x7f00000000c0), 0x0) 18:22:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) 18:22:37 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x2, 0x4, @tid=r0}, &(0x7f0000000180)) 18:22:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:37 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b63, 0x0) 18:22:37 executing program 1: syz_clone(0xc0001000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 18:22:37 executing program 2: add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 18:22:37 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x5452, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"]) 18:22:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x80045432, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b3c, 0x0) 18:22:37 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x101) write$P9_RRENAMEAT(r0, 0x0, 0x0) 18:22:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4e60fd86afc50ae0, 0x0) 18:22:37 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x5422, 0x0) 18:22:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5437, 0x0) 18:22:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETSW(r0, 0x540f, 0x0) 18:22:38 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x5421, &(0x7f0000000000)) 18:22:38 executing program 3: write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x24044800}, 0x4008000) syz_mount_image$vfat(&(0x7f0000001600), &(0x7f0000001640)='.\x00', 0x0, 0x0, &(0x7f0000001680), 0x4, &(0x7f00000016c0)={[{@rodir}, {@shortname_winnt}, {@shortname_lower}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'team_slave_1\x00'}}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x44000022}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x5c, 0x0, 0x20, 0x70bd27, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 502.115119][T22276] FAT-fs (loop3): bogus number of reserved sectors [ 502.158950][T22276] FAT-fs (loop3): Can't find a valid FAT filesystem 18:22:38 executing program 1: syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x410001) 18:22:38 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x4b30, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:38 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "f2f0dc2243d43c73047daf1e21548e35959093"}) 18:22:38 executing program 4: fanotify_mark(0xffffffffffffffff, 0xdf466ec77d167f8b, 0x0, 0xffffffffffffffff, 0x0) 18:22:38 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_uring_setup(0x7408, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 18:22:38 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 18:22:38 executing program 4: pipe2(&(0x7f0000000040), 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/158, 0x9e) 18:22:38 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0xc4f9, 0x3, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}], 0x4, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private0, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) 18:22:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) 18:22:38 executing program 5: r0 = epoll_create(0xefd8) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)) 18:22:38 executing program 3: r0 = io_uring_setup(0x3079, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) 18:22:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x0, 0x3}, 0x48) 18:22:39 executing program 4: io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r0, 0x3, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0, 0x0]) 18:22:39 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x100010, r0, 0x10000000) [ 502.872392][T22299] loop2: detected capacity change from 0 to 98 18:22:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 18:22:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=@getrule={0x14}, 0x14}}, 0x0) 18:22:39 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmsg$unix(r0, 0x0, 0x0) 18:22:39 executing program 2: syz_mount_image$ext4(&(0x7f0000003440)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000003480), 0x200000, &(0x7f0000003280)=ANY=[@ANYBLOB='data_err=ignore,smackfsroot=virt_wifi0\x00', @ANYRESDEC=0xee00]) bpf$OBJ_GET_PROG(0x7, &(0x7f0000003400)={&(0x7f0000002cc0)='./file0\x00', 0x0, 0x10}, 0x10) 18:22:39 executing program 1: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1cf99755bfd2f416) 18:22:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cb, 0x0) 18:22:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000040)="0e127acd", 0x4) 18:22:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000008c0)="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", 0x741}], 0x0, 0x0) 18:22:39 executing program 4: r0 = socket(0x2, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000002000)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 18:22:39 executing program 1: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r0) 18:22:39 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) [ 503.243205][T22322] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:22:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x409, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}]}, 0x24}}, 0x0) 18:22:39 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "da6e1cabc5607c6880a5c37aa8c50b8cc3e623db1c50fd54a9a5fb808cc76671ca47eba91428f9de9508055bd3cbc31ee02684d36b888f306b6d1149bf56486c", "0d9a0cb2b89038d3db128bb28af3704251f8aca2668385d2a3a063b57f859850"}) 18:22:39 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 18:22:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'dummy0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000001040)) 18:22:39 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x402, 0x0) 18:22:39 executing program 0: socket(0x64, 0x0, 0x0) 18:22:39 executing program 4: bpf$LINK_GET_FD_BY_ID(0x19, 0x0, 0x0) 18:22:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 18:22:39 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) 18:22:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000500)=@framed={{}, [@map_idx_val]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:39 executing program 4: syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x305802) 18:22:39 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r1, 0x1}, 0x14}}, 0x0) 18:22:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) [ 503.667861][T22345] binder: 22344:22345 ioctl 400c620e 0 returned -14 18:22:39 executing program 1: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x490100, 0x0) 18:22:39 executing program 4: r0 = epoll_create(0x3) epoll_wait(r0, &(0x7f0000002240)=[{}], 0x1, 0x3) 18:22:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x409, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}]}, 0x24}}, 0x0) 18:22:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 18:22:39 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:40 executing program 0: bpf$LINK_GET_FD_BY_ID(0x10, 0x0, 0x0) 18:22:40 executing program 2: sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 18:22:40 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@generic]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x68, &(0x7f00000005c0)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:40 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000580)={0x10}, 0x10}, 0x0) 18:22:40 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) 18:22:40 executing program 5: bpf$LINK_GET_FD_BY_ID(0x15, 0x0, 0x0) 18:22:40 executing program 1: pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x0) statx(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 18:22:40 executing program 0: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) 18:22:40 executing program 2: bpf$LINK_GET_FD_BY_ID(0x2, 0x0, 0x0) 18:22:40 executing program 4: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:22:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x0) 18:22:40 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 18:22:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xe07}, 0x48) 18:22:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000780)) 18:22:40 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 18:22:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="d00000000201010200000000000000000300000108000740000007ff240010a3080003400000000208000140000000030800014000000001080001400000000108000840000000010800074000000003080015480000000308000c40000000030c0001"], 0xd0}}, 0x0) 18:22:40 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x6, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @local}}]}, 0x210) 18:22:40 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x8, &(0x7f0000000500)=@framed={{}, [@generic, @map_idx_val, @map_fd]}, &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000840)) [ 504.446421][T22399] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.5'. [ 504.486543][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) 18:22:41 executing program 2: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="b5f4101f90bfa39e3607a88e6439ba0b90db26218abfd00cb12a5d742cb527a15d6248978ee922de9348b093b0d4d9955710075e11e2b0c83675f3a4f0d380dabb371ded663f96b0bf", 0x49, 0x7c53}, {&(0x7f0000000100)="29d9d77cb2a539a6c99ee39bc30ea2f0a38129c6ab7f27bcc6bb15e72a23fb9fc844ff361ab1f615a2ea153d673aa623d569f12b31c13b80dfe22690a2de4560cfb2654aff02984a28f1002eb870fbf5634a58c8566d840775955643180fc3a2ce84ef135e067a7fc24624e4180e49b5b3d6d391e45a0ee8022df7b8683d8db3433bc1b45321db464d31dd1866791b4564cd264c97b0ae4e38c046820ccdfc4cac3278aa4f9feb492acfe1e4da857cb31df1f270aef53761b9ed96921561a3d4c0fcb7d90c1004a5937b01121ccda1089cfb6535c2aab7823854c81a8d4327b4d31e8bff5e", 0xe5, 0xf92}], 0x40, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x452d}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@commit={'commit', 0x3d, 0xfffffffffffffffd}}, {@i_version}, {@errors_continue}, {@nodelalloc}, {@test_dummy_encryption}, {@data_err_ignore}], [{@appraise}]}) 18:22:41 executing program 4: io_uring_setup(0x0, &(0x7f0000000180)) 18:22:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x13d4}, 0x48) 18:22:41 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x2, &(0x7f0000000380)=@raw=[@map_idx_val], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10497}, 0x80) 18:22:41 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000ec0)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "39629d25fdab8d1d2ea3b5085faad401e5cb70b89190c7763d5173ac2479897c7ded0cc125be0f62c1970952b0bbce315ec04a84be9d023ed4e08ca54cb436"}, 0x60, &(0x7f0000000380)=[{&(0x7f0000000080)="3444c19d22486bb1d501f6a40709a60e776f86546c46d503323a2d150bf74a5dac77516621c643f0fb5418e97ab1eea71ad6d0edb6f72b8e178e33eff7cad92e3194d23b49f4c26fa9de1f70eab99080b37e82ebab7cb6fd97ba989b471311f014", 0x61}, {&(0x7f0000000100)="34e9490872a12e4051226da2b5010f7b18", 0x11}, {&(0x7f0000000140)="878564d6a82b59d9b91be36d87f6ec6fc13c260002e1e4c0a2d4c9bb0aee8688d0c8480132f641ed59e493acecd1", 0x2e}, {&(0x7f0000000180)="bf5dba5fadc2c1c745d249b1779db763cc71f981a9457f87fb89523740244045789321b20d5ee4fa676da918b27cd7b8a010dea1aaaa1302c4b5d0054f0c8c3e1039d5597626f47087038faa8f8242c55faaede6552a8f6a166edbf26bc3f2235cb74cb6174b38d3c177fc59219bc815799d6f9996a55b88b4111fd4c3bc7d3169f935a5eab7cb082871584209e601503fafb13e1471b4ae24da8b7ad1a8b18358472b0bdf0ebb98b8e4c9c516956ca23921ef2ac231678e97429398cdf2ab3c36a376a1db916bf052cfc88cefbff1aabca9a6dd327b04399ee6b7dc", 0xffffffffffffffb2}, {&(0x7f0000000280)="137424dbe9f0b51559c5de2c00cd06db0755b06376e06b46a0ec0e18f14bda7cebd681a2bffdfcde9364ddaa541444fa41a844682fdb75987f2005c96a521ede3a50ad27cfe416411604f19687e9e3ebdefebba82cf03aa12e4b881483a0d3b45692d99384110a4955342709e5082986b062ff0f5a5d9db42fd0a87692cf69cee3452d480061cf160aafefa73e8f90c19eb07ae6f06c1faae2a8c25cc7c9d92d59ddf0dbc10c42cad511308e0ce085e13b41cbbacdae3c6887d75acf188c8da49e527e8391cbb9bd69e400478cb4b2c7c89aad", 0xd3}], 0x5, &(0x7f0000000400)={0xb0, 0x0, 0x0, "de28f9d1d0a9d615ecaed96ed024e6694cae6deb383ee342b9f18ed0dfba45c2a62358cbd995da098c9daf0804906247631ba5c31ee6aa2c012721c33db0ba27c69b1d07601ec523d8ba95a74971378372c8b5d1ee113cf77611939d1cb69b6fe8958b9c7e2b9a8e9c1ee89080a6649e27565328bed05df972798d7458a52705febd8910b1dc75f70692020a28a47d9f930c8ac5ff632de8e0"}, 0xb0, 0x11}, {&(0x7f00000004c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "f34f511a125051da0e44a192cd6abb91856c1f458e8ae235de186dc3f275172431f4a2adef8a67045f9bcf5303493f65d8bc5b24d4d8c0f2b24fa7d52380e7"}, 0x60, &(0x7f0000000600)=[{&(0x7f0000000540)="f9dde50b0977bf9e2c595de734c07296eb028ddf9ff19924b64167549afcfa75d12ff9f573e437c98088bab595066e58b987e9a9726ffab37fb79f8ff6c63db72fdfeadb16f15d4e6eefb507b77187875285a8dbfa13a4473dde640cc00301528fc7734516c6c706a0b7c9814579936263941a88791046083e17963b267246934f60fbd869759df45651c98410f7dedd87147afe41530a86a492c80a9335291f52b9ad8a764b3932b59e85ffcb", 0xad}], 0x1, &(0x7f0000000640)={0x98, 0x0, 0x0, "f75b022a8911cc4eaed4f5dafd1d2df17f659b64d57be1f8f824a7fe40a28fb57579b594c73d079f1d25f1857182cfa8d17e9801f9d4c86ab39831913fc6a8d365d3c47ffe81421145859e67d8d0790321bdc7d41e7a02db53bbd5e6ca830268016b8e7640a0f7772744599a6d9fd58d3d18c124b38987197082777805aff187ea6dbafc21bb"}, 0x98, 0x20000000}, {&(0x7f0000000700)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "fedc8521201dfd4fd3e00cd58a19696e92a19c7bc1561ef58198f2c5dc7ea31ed465eee9439763483683430987c173877cfe131c75a23ea69e274fbe98ecc7"}, 0x60, &(0x7f00000009c0)=[{&(0x7f0000000780)="d6ee29961f01e8b75d4f2c211db3142db2735f439fcf3651d8e3f1cd7bb7fe697176b4d3b2640ecf0a67776c2d66dfa4867597b8b48805a1f3e35e5aca6f20b50ce52a414f41", 0x46}, {&(0x7f0000000800)="a2d397f2ee295b940508d7df8484a7ffe5f9d6eb686151184b7857cc5b28219416710ea1e3631b95a9bd76666c36a347f68c4dc4", 0x34}, {&(0x7f0000000840)="bb699c5b7e7bc1c10ecd3deb6f", 0xd}, {&(0x7f0000000880)="da1db9c2dc51c20b155cc22dadae7162f6430309fb45d8b450fbf768a6bfb5f0e307a98140c2adef87552c38622927cb5b3a188fe6228cb51ded75bb1af7c4a51006cafefea13813295730565d8c4d3b1fdc6f4eed9ed2531c", 0x59}, {&(0x7f0000000900)="5ea1ff65632de49db2d1d5eaedc9242c13c62ef1acf79992006b3e62d7fcec4a411d79620d49343f5ce708886f27d0729ab11678c2cdfbd854", 0x39}, {&(0x7f0000000940)="686e1f1840c24b4dca6c4e1e4850596520d4eb88630b4366b80073d80bbe0fa934bceef18ff38e736fba6fa18d8974433fb9a19e1c9ffb381db04f84e4738c0b9e5ae8245ffc34af00ed405255ea8919a1f9b1d5e41dc55c13b950bcb609fcec18c1ac2015025cf82be15b21cd009a09130115c979", 0x75}], 0x6, &(0x7f0000000a40)={0x30, 0x0, 0x0, "422b2ff083a87ce26ae1ccbfdcd60dc2cc8720c190449edc8f4cc4c416f1f2e4"}, 0x30, 0x40840}, {&(0x7f0000000a80)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f4255a72103dbf6e8ad75ffcd2ff16adbbdf41eda2a9cec23f9fe47c483f819e99915fe853797639eaeef88a504307eee671b49093d9e4b9ff7284cc65eac"}, 0x60, &(0x7f0000000e00)=[{&(0x7f0000000b00)="8196762a2e0232932550ed3ad030b7a88abefb0a176239656298508fa27541d1926cdbbe5230cdadab7df4ef541bc465ef8f2864dc5d66a526b4c0f3b763b993801866de3cc3c14bd1ab710545bcabefd0771c768f36b869de5623ab635ba1ceabe79908b8a3f6e0bf144a2ecf", 0x6d}, {&(0x7f0000000b80)="7b69bf0caa8d8109cf20d3aec609ee53f2471c64b0ea3b573a011543fc82670c0c7d40a8f8d210dc098ffb117d5dc77c96bcb5741ebefc5afad0555a94c6b9a81bc0c4bfdbea7ba3b0c14a6fa1a7172bc4cb962acef7468a28ac5d36ab5b6587235b2acd04e4c07a14432bd34686b464b1f9b434e15dbb0f8c0195613fe602b2fc3587db7bb55669e5aded393eca7c6955d7e664245fdca9bc3cefe1937bae3c36a6c28af05cf4df8abfe2eda60e928ea476083d2890c447ae96d7ad76abfeb0f962de766f68a8907aa75549d62c902dd40fa8682627ab311174d3094311c9da676ca0caea802a794c45847dc35565dfacbe68ac6a1ea92724", 0xf9}, {&(0x7f0000000c80)="34d79ee1884c86b6a8b3dc13910e992fa15c92e854638e1f09de3d81f70f7329984f228f4da31d008175464f108bbecc4cf86f80cdb99d56ab55ca3cbd64b1c9121867db7eac852e0e6a7709ce491c57fd8e5b2a923c02f0eecc6e241f922c2c3b6083ee3886971d4a90888a29053ca9fa7071567a07ffa3d02583b31aa8f528593ea0a79a609323d8613ad2a30a449910d2a500490e6100f4282214ab5808bc9c18934f97d9e629b9cc80df85b3259d", 0xb0}, {&(0x7f0000000d40)="dd2ea081807e0f371f7c77e2dcecedd31587be60a2532716fcde1134859cff5002e177504691b971e62ec6464d7222f3efdadb9208df6db70383403678cd927e4b70de96cfcc1c13", 0x48}, {&(0x7f0000000dc0)="8054ad7bfdf09ea7c9800ea4830bc075dd9a2675a9314d630bd8e67661889086feed4a65c282787cc76a7d70836336b8032b8d51e2a3a8b381", 0x39}], 0x5, &(0x7f0000000e80)={0x40, 0x0, 0x0, "2d8c63bfa992e10f1524b3e712c217b53ed2044b371d1877ebde4687d7945149ac7d6fd53d45f340f2352ab3763555eb"}, 0x40, 0x20040080}], 0x4, 0x4004000) [ 505.053720][T22406] loop2: detected capacity change from 0 to 124 18:22:41 executing program 5: syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)={[{@fault_injection}], [{@seclabel}]}) 18:22:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x128, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"0090"}}, @common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@loopback, @private0, [], [], 'vlan0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 18:22:41 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x10000000) 18:22:41 executing program 2: pipe2(&(0x7f00000000c0), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) [ 505.101814][T22406] EXT4-fs: Invalid want_extra_isize 17709 18:22:41 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000ec0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x28, 0x0, 0x0, "de28f9d1d0a9d615ecaed96ed024e6694c"}, 0x28}], 0x1, 0x0) 18:22:41 executing program 0: syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/250, 0xfa, &(0x7f0000000200)=""/32, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) 18:22:41 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000880)={0x70002002}) 18:22:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}}, 0x0) 18:22:41 executing program 2: pipe2(&(0x7f00000000c0), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 18:22:41 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) 18:22:41 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 18:22:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b905d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff0000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0xff}]}}) 18:22:41 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x10000000) 18:22:41 executing program 2: pipe2(&(0x7f00000000c0), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 18:22:41 executing program 5: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0xb5}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) 18:22:41 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) 18:22:41 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000500)=@framed={{}, [@generic, @generic={0x40}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x3}, 0x10}, 0x80) 18:22:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) [ 505.548245][T22440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241622457 (4241622457 ns) > initial count (296265111 ns). Using initial count to start timer. 18:22:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0045878, 0x0) 18:22:41 executing program 2: pipe2(&(0x7f00000000c0), 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 18:22:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0xf0, 0x0, 0xffffffff, 0x3a8, 0x0, 0x510, 0x510, 0xffffffff, 0x510, 0x510, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@loopback, @gre_key}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ipvlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}, {{@ipv6={@private0, @dev, [], [], 'macsec0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 18:22:41 executing program 5: pipe2(&(0x7f0000000000), 0x0) getresgid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) 18:22:41 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000440)='./file0\x00'}, 0x10) 18:22:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff0000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0xff}]}}) 18:22:41 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081270, 0x0) 18:22:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x128, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0090"}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@loopback, @private0, [], [], 'vlan0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 18:22:41 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x0) 18:22:41 executing program 2: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000880)) 18:22:42 executing program 0: syz_mount_image$erofs(0x0, 0x0, 0x0, 0x1, &(0x7f0000002940)=[{&(0x7f0000001900)="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", 0x701, 0xfffffffffffffff9}], 0x0, 0x0) 18:22:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c04, 0x0) [ 505.925812][T22476] loop0: detected capacity change from 0 to 16383 [ 505.932508][T22474] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:22:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 18:22:42 executing program 4: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 18:22:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 18:22:42 executing program 2: bpf$LINK_GET_FD_BY_ID(0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:42 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1, 0x8001}, {&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}, {&(0x7f0000000380)='*', 0x1}, {&(0x7f0000000480)='F', 0x1}, {&(0x7f0000000540)="a6", 0x1}], 0x0, 0x0) 18:22:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff0000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0xff}]}}) 18:22:42 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f00000003c0)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x0, 0xf3, &(0x7f0000000100)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x0) 18:22:42 executing program 2: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x42, &(0x7f00000001c0)=""/66, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c076}, 0x80) [ 506.186072][T22492] loop0: detected capacity change from 0 to 62194 18:22:42 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0481273, 0x0) 18:22:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x0) [ 506.274002][T22494] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4241622457 (4241622457 ns) > initial count (296265111 ns). Using initial count to start timer. 18:22:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x0, 0x3}, 0x48) 18:22:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffff0000, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, '\x00', 0xff}]}}) 18:22:42 executing program 2: r0 = io_uring_setup(0x7677, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) 18:22:42 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 18:22:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x0) 18:22:42 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = io_uring_setup(0x378, &(0x7f0000000380)) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 18:22:42 executing program 1: bpf$LINK_GET_FD_BY_ID(0x3, 0x0, 0x10) 18:22:42 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0xb5}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:22:42 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x0) 18:22:42 executing program 1: syz_mount_image$erofs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000680), 0x2002048, &(0x7f0000000780)) 18:22:42 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 18:22:42 executing program 0: syz_open_dev$evdev(&(0x7f0000000280), 0x5, 0x0) 18:22:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) 18:22:42 executing program 3: mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) 18:22:42 executing program 4: socketpair(0x0, 0x80013, 0x0, 0x0) 18:22:42 executing program 1: syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/250, 0xfa, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) 18:22:42 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 18:22:42 executing program 0: syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)={[], [{@seclabel}]}) 18:22:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@bridge_getlink={0x20}, 0x20}}, 0x0) 18:22:43 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) 18:22:43 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0xff, &(0x7f0000000080)=0x0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 18:22:43 executing program 4: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) 18:22:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x0) 18:22:43 executing program 0: bpf$LINK_GET_FD_BY_ID(0x3, 0x0, 0x0) 18:22:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 18:22:43 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) 18:22:43 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x2, &(0x7f0000000380)=@raw=[@map_idx_val], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:43 executing program 1: io_uring_setup(0x7408, &(0x7f0000000040)={0x0, 0x0, 0x20}) 18:22:43 executing program 3: syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x2) 18:22:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 18:22:43 executing program 1: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) clock_getres(0x5, &(0x7f0000000000)) 18:22:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'erspan0\x00', 0x0}) 18:22:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 18:22:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) 18:22:43 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680), 0x10}, 0x80) 18:22:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 18:22:43 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaab7d, &(0x7f0000000380)=[{&(0x7f0000000100)="b1f68d5f09146d0d8d11dcaede4794e3a2ca431e325dd8c6f277ba0269d78b36f198bf77b43c24", 0x27, 0x9}, {&(0x7f0000000140)="16ebb0", 0x3, 0xfbd}], 0x1408, &(0x7f00000001c0)={[{@i_version}, {@jqfmt_vfsold}, {@discard}, {@nodelalloc}, {@block_validity}, {@init_itable_val}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:43 executing program 2: socket(0x10, 0x0, 0x9) 18:22:43 executing program 1: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) clock_getres(0x5, &(0x7f0000000000)) 18:22:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) 18:22:43 executing program 3: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="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", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) 18:22:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 18:22:43 executing program 1: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) clock_getres(0x5, &(0x7f0000000000)) 18:22:43 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001840)='ns/mnt\x00') 18:22:43 executing program 4: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc4f9, 0x9, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="2ae4f0f976c5e64754614f437b6bd71d3c2cd2b8353f1edbb52cbdec58cdbdfad5a008f187ec2f6867acdb2e549a849d526fa7a1f53d8def709d8a3eb070155d9c2408d9e6b45bf17ce1fe14e70b54951f7a14ba3d12ea9e2a5f58a5d0340a8f1678b41f3bd400e45fa3199eb80511d00e28dc72f2302509ed5ce7f70ec835e8ee3ad1e6a79f4ad248af636078cd2d38e58bdad46dad2f7a45aadb1f5a9d37035e81525d57edd935b6713eadd8f4e4d78ed075238728dddbf23a5b5a65ea14c9d38a588a9db286d4d1aecf07119676dcd1887db3536a07f400ce60de24ab35a187824063821a27241faa13af7fc891e00f82f68254628a28bd28ee1c", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {&(0x7f00000004c0)="7292b0c0a614344973d0c1c1ec4266fc8a1e1541a1f361f1299fdc6cb0c2b91162b26762570c10672b6dfd0795ef8c5a8ec0753df1fc13148ae5d92666ad5e30a64c5ae0f9aebaa4bfc078", 0x4b, 0x1000}, {&(0x7f0000000540)="a654fd2bc6e39b45d4d417f82002ca6a0620d254d18b427ac5b18cb0f7d7951b", 0x20, 0xc06}, {&(0x7f0000000580)="5c92f99e9297e9aa18a7ab8765bcf5e347e808e1f8cc65e0dff03818b85e3c52d9e0788c7c11850e9a35db8ce85221bfcc1af056e3bee3ffff493de90c5ed5fc48cf77f0ee9c19719f8fed1af8e6190fdb49efbf67ad5e957d9b14425c957ae8849fed09e022bebfe1a99694841443e3153411e64652bd93b9eba08686e3e1f748a3ac2c39ad798b923a2993e777ba1c0f49c2f7d01e5835e178e0fe45ecd9fb2c8e5d32a8bf9f4dbd20c8adcc3c3f7126959ea05216d194bc974d031ece8dd26427f27017179aed27f805835b9e0cae02c080ea", 0xd4, 0x7ff}, {&(0x7f0000000680)="b7ec7347e46e26c539dea0299e33b86a88743d3bc3d44f5764eea47341fc73807f08b5222a3a35880631b5c860158f3eb94a94503d910e859eec7fc992bb66c477a6930ea740adb12dd6f4f658a558548d5e20b27df917448123561dc3114e7f18782bac2901e865abf4cbee3a1a2490aba8a845f833d868bcca51572a6ac288a616945585240e1a05e561f4ffed7299496eaf9ef6de9be1d407954eb21eb91cacf21fd6508f6c4c3166866644432b24396ab6c8f672b33ed023555d1bb7dde6527eae1cdea9a11b7b54fabd63b944806014fd1bd7a20cb171517f5d40174a012ec6682e4f84badb101ecfd4c5a7940035ed52379cbd", 0xf6, 0xf27}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) [ 507.560766][T22589] loop3: detected capacity change from 0 to 62194 18:22:43 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) [ 507.624016][T22589] ext4: Unknown parameter 'rootcontext' 18:22:43 executing program 1: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) clock_getres(0x5, &(0x7f0000000000)) [ 507.681877][T22598] loop4: detected capacity change from 0 to 62194 18:22:43 executing program 3: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="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", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) [ 507.800126][T22598] ext4: Unknown parameter 'rootcontext' [ 507.850978][T22605] loop3: detected capacity change from 0 to 62194 [ 507.882898][T22605] ext4: Unknown parameter 'rootcontext' 18:22:44 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaab7d, &(0x7f0000000380)=[{&(0x7f0000000100)="b1f68d5f09146d0d8d11dcaede4794e3a2ca431e325dd8c6f277ba0269d78b36f198bf77b43c24", 0x27, 0x9}, {&(0x7f0000000140)="16ebb0", 0x3, 0xfbd}], 0x1408, &(0x7f00000001c0)={[{@i_version}, {@jqfmt_vfsold}, {@discard}, {@nodelalloc}, {@block_validity}, {@init_itable_val}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[], [{@context={'context', 0x3d, 'staff_u'}}]}) 18:22:44 executing program 1: bpf$LINK_GET_FD_BY_ID(0x21, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c03, 0x0) 18:22:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec000000000101"], 0xec}}, 0x0) 18:22:44 executing program 3: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="2ae4f0f976c5e64754614f437b6bd71d3c2cd2b8353f1edbb52cbdec58cdbdfad5a008f187ec2f6867acdb2e549a849d526fa7a1f53d8def709d8a3eb070155d9c2408d9e6b45bf17ce1fe14e70b54951f7a14ba3d12ea9e2a5f58a5d0340a8f1678b41f3bd400e45fa3199eb80511d00e28dc72f2302509ed5ce7f70ec835e8ee3ad1e6a79f4ad248af636078cd2d38e58bdad46dad2f7a45aadb1f5a9d37035e81525d57edd935b6713eadd8f4e4d78ed075238728dddbf23a5b5a65ea14c9d38a588a9db286d4d1aecf07119676dcd1887db3536a07f400ce60de24ab35a187824063821a27241faa13af7fc891e00f82f68254628a28bd28ee1c", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) 18:22:44 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000880)) 18:22:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f00000003c0)=@newchain={0x24}, 0x24}}, 0x0) [ 508.430933][T22611] loop3: detected capacity change from 0 to 62194 [ 508.452951][T22614] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. 18:22:44 executing program 1: sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 508.508884][T22611] ext4: Unknown parameter 'rootcontext' 18:22:44 executing program 4: socket(0x1e, 0x0, 0x8) 18:22:44 executing program 3: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="2ae4f0f976c5e64754614f437b6bd71d3c2cd2b8353f1edbb52cbdec58cdbdfad5a008f187ec2f6867acdb2e549a849d526fa7a1f53d8def709d8a3eb070155d9c2408d9e6b45bf17ce1fe14e70b54951f7a14ba3d12ea9e2a5f58a5d0340a8f1678b41f3bd400e45fa3199eb80511d00e28dc72f2302509ed5ce7f70ec835e8ee3ad1e6a79f4ad248af636078cd2d38e58bdad46dad2f7a45aadb1f5a9d37035e81525d57edd935b6713eadd8f4e4d78ed075238728dddbf23a5b5a65ea14c9d38a588a9db286d4d1aecf07119676dcd1887db3536a07f400ce60de24ab35a187824063821a27241faa13af7fc891e00f82f68254628a28bd28ee1c", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) 18:22:44 executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x900, 0x28120003) [ 508.821201][T22629] loop0: detected capacity change from 0 to 512 [ 508.895586][T22630] loop3: detected capacity change from 0 to 62194 [ 508.959233][T22630] ext4: Unknown parameter 'rootcontext' [ 508.974413][T22629] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. 18:22:45 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaab7d, &(0x7f0000000380)=[{&(0x7f0000000100)="b1f68d5f09146d0d8d11dcaede4794e3a2ca431e325dd8c6f277ba0269d78b36f198bf77b43c24", 0x27, 0x9}, {&(0x7f0000000140)="16ebb0", 0x3, 0xfbd}], 0x1408, &(0x7f00000001c0)={[{@i_version}, {@jqfmt_vfsold}, {@discard}, {@nodelalloc}, {@block_validity}, {@init_itable_val}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:45 executing program 1: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) clock_getres(0x0, &(0x7f0000000000)) 18:22:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 18:22:45 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x101, @dev}}, 0x1e) 18:22:45 executing program 0: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) 18:22:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setpriority(0x2, 0x0, 0x7ff) 18:22:45 executing program 1: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) 18:22:45 executing program 0: pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0xc4f9, 0x9, &(0x7f0000000780)=[{&(0x7f0000000240)="034821d4f157554925a3f754ffd37a29d58aa8fa058b3303728cc9d8fe5566a0b1ff6b1e22eafe408cfeb7edc1d04c7ff9023e2a6b5bcb12a2650e9f4663125a7fcc12100c137bd51ff39baf6ae72599ff1714c15fb1cb4e1bc083c3626508d28166a60a7bae2449630724c71d3307fb3411c0b0ee2f3670dcea6fc6fc8ae78735186dc2361dad0b42a8edda976600e46500abc21a3e64ac1ab55e4cbb732f9a97ef3efd1c88637d15eb7f6a5eb3d3374ac2faa5411f", 0xb6, 0x8001}, {&(0x7f0000000300)="c6a4d354eef107ce3aea48f98cbf1b31f8cd5c7bce5ecc733ef74fc886118d92ef818b0c53bd573582d5b1ed607d779ce4e0", 0x32, 0x4}, {&(0x7f0000000340)="61867fc96a937a41e6380676853d6e988ecc44978a752b180fea2760a78aaa5dabcabfd6832c60d3c064db8d3ea0ae6e3db087e6d7b0", 0x36, 0x3962f2f7}, {&(0x7f0000000380)="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", 0xfc, 0x1}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {&(0x7f00000004c0)="7292b0c0a614344973d0c1c1ec4266fc8a1e1541a1f361f1299fdc6cb0c2b91162b26762570c10672b6dfd0795ef8c5a8ec0753df1fc13148ae5d92666ad5e30a64c5ae0f9aeba", 0x47, 0x1000}, {&(0x7f0000000540)="a654fd2bc6e39b45d4d417f82002ca6a0620d254d18b427ac5b18cb0f7d7951b", 0x20, 0xc06}, {&(0x7f0000000580)="5c92f99e9297e9aa18a7ab8765bcf5e347e808e1f8cc65e0dff03818b85e3c52d9e0788c7c11850e9a35db8ce85221bfcc1af056e3bee3ffff493de90c5ed5fc48cf77f0ee9c19719f8fed1af8e6190fdb49efbf67ad5e957d9b14425c957ae8849fed09e022bebfe1a99694841443e3153411e64652bd93b9eba08686e3e1f748a3ac2c39ad798b923a2993e777ba1c0f49c2f7d01e5835e178e0fe45ecd9fb2c8e5d32a8bf9f4dbd20c8adcc3c3f7126959ea05216d194bc974d031ece8dd26427f27017179aed27f805835b9e0cae02c080ea", 0xd4, 0x7ff}, {&(0x7f0000000680)="b7ec7347e46e26c539dea0299e33b86a88743d3bc3d44f5764eea47341fc73807f08b5222a3a35880631b5c860158f3eb94a94503d910e859eec7fc992bb66c477a6930ea740adb12dd6f4f658a558548d5e20b27df917448123561dc3114e7f18782bac2901e865abf4cbee3a1a2490aba8a845f833d868bcca51572a6ac288a616945585240e1a05e561f4ffed7299496eaf9ef6de9be1d407954eb21eb91cacf21fd6508f6c4c3166866644432b24396ab6c8f672b33ed023555d1bb7dde6527eae1cdea9a11b7b54fabd63b944806014fd1bd7a20cb171517f5d40174a012ec6682e4f84badb101ecfd4c5a7940035ed52379cbd", 0xf6, 0xf27}], 0x4, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x5}}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) 18:22:45 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640), 0x8, 0x10, 0x0}, 0x80) 18:22:45 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "2682fcac3b0b1cc96865239e05d188882f56d9a395d341387d36478e4f3647f30fc21dafd2464855540bd213b0ef14801c88145c5f40d32bd9780a6095414e"}, 0x60) 18:22:45 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setpriority(0x2, 0x0, 0x7ff) 18:22:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f0000000040)) [ 509.694798][T22651] loop0: detected capacity change from 0 to 62194 [ 509.738617][T22651] ext4: Unknown parameter 'rootcontext' 18:22:46 executing program 5: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaab7d, &(0x7f0000000380)=[{&(0x7f0000000100)="b1f68d5f09146d0d8d11dcaede4794e3a2ca431e325dd8c6f277ba0269d78b36f198bf77b43c24", 0x27, 0x9}, {&(0x7f0000000140)="16ebb0", 0x3, 0xfbd}], 0x1408, &(0x7f00000001c0)={[{@i_version}, {@jqfmt_vfsold}, {@discard}, {@nodelalloc}, {@block_validity}, {@init_itable_val}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:22:46 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x305802) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 18:22:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000500)=@framed={{}, [@generic, @generic={0x40}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setpriority(0x2, 0x0, 0x7ff) 18:22:46 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:46 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 18:22:46 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000002880)='./binderfs/binder1\x00', 0x801, 0x0) 18:22:46 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$evdev(r0, 0x0, 0x0) 18:22:46 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) setpriority(0x2, 0x0, 0x7ff) 18:22:46 executing program 1: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="b5f4101f90bfa39e3607a88e6439ba0b90db26218abfd00cb12a5d742cb527a15d6248978ee922de9348b093b0d4d9", 0x2f, 0x7c53}, {&(0x7f0000000100)="29d9d77cb2a539a6c99ee39bc30ea2f0a38129c6ab7f27bcc6bb15e72a23fb9fc844ff361ab1f615a2ea153d673aa623d569f12b31c13b80dfe22690a2de4560cfb2654aff02984a28f1002eb870fbf5634a58c8566d840775955643180fc3a2ce84ef135e067a7fc24624e4180e49", 0x6f, 0xf92}], 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) 18:22:46 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$unix(r0, 0x0, 0x0, 0x40000) 18:22:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x1}, 0x14}}, 0x0) [ 510.694221][T22676] loop1: detected capacity change from 0 to 124 18:22:47 executing program 3: r0 = io_uring_setup(0x3079, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r0, 0x10000000) 18:22:47 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x145c0, 0x0) 18:22:47 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)=ANY=[]}) 18:22:47 executing program 1: bpf$LINK_GET_FD_BY_ID(0x15, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 18:22:47 executing program 1: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x70002036}) 18:22:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xe07, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) 18:22:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32, @ANYBLOB="0020004000000001"]}) 18:22:47 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f00000003c0)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x0) 18:22:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x548, 0xf0, 0x0, 0xffffffff, 0x3a8, 0x0, 0x510, 0x510, 0xffffffff, 0x510, 0x510, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@loopback, @gre_key}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ipvlan0\x00', 'team_slave_1\x00'}, 0x0, 0x180, 0x1c8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, @empty}}, @common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@loopback, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}, {{@ipv6={@private0, @dev, [], [], 'macsec0\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 18:22:47 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000080)=""/4096, 0x26, 0x1000, 0x1}, 0x20) 18:22:47 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f00000003c0)=@raw=[@initr0], &(0x7f00000000c0)='GPL\x00', 0x8000, 0xf3, &(0x7f0000000100)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:47 executing program 0: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f0000000780)=[{0x0, 0x0, 0x8001}, {&(0x7f0000000300)}, {0x0}, {0x0}], 0x4, &(0x7f0000000880)={[], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) 18:22:47 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x981, 0x0, 0x40, 0x1, 0xd0c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xf}, 0x48) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x9, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7, 0x0, 0x0, 0x8000, 0x800}, @generic={0x40, 0x7, 0x6, 0x400}, @map_idx_val={0x18, 0x1}, @map_fd={0x18, 0x8}]}, &(0x7f0000000580)='GPL\x00', 0x9, 0x68, &(0x7f00000005c0)=""/104, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000640)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x80) 18:22:47 executing program 4: syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) 18:22:48 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9}]}) 18:22:48 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x9}, {}, {}, {0x6}, {0x7}]}) [ 511.890250][T22713] loop0: detected capacity change from 0 to 128 18:22:48 executing program 2: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) 18:22:48 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x100, 0x28120003) 18:22:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 18:22:48 executing program 1: syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x141000) [ 512.020541][T22713] ext4: Unknown parameter 'rootcontext' 18:22:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) 18:22:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) 18:22:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@security={'security\x00', 0xe, 0x4, 0x3f8, 0xffffffff, 0x128, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'veth1_to_batadv\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"0090"}}, @common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@loopback, @private0, [], [], 'vlan0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}}, @common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 18:22:48 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) accept4$unix(r0, 0x0, 0x0, 0x400) 18:22:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101286, 0x0) 18:22:48 executing program 5: epoll_create(0xefd8) [ 512.233791][T22736] x_tables: duplicate underflow at hook 2 18:22:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x13d4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x48) 18:22:48 executing program 1: bpf$LINK_GET_FD_BY_ID(0x16, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:48 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000580)={0x28, 0x0, 0x0, "01de912935064ba96bc5f17395cc049564"}, 0x28}, 0x0) 18:22:48 executing program 0: io_uring_setup(0x4428, &(0x7f0000000200)) 18:22:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 18:22:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) r0 = socket(0x0, 0x2, 0x23) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@generic={0x7, 0x8, 0x0, 0x8000, 0x800}, @generic={0x40, 0x7, 0x6, 0x400, 0xb90}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb}, @map_fd={0x18, 0x8}]}, 0x0, 0x9, 0x68, &(0x7f00000005c0)=""/104, 0x40f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4}, 0x10}, 0x80) 18:22:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'dummy0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 18:22:48 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e127acd2bb36e52", 0x8) 18:22:48 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e00)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 18:22:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x148, 0x280, 0xffffffff, 0x148, 0x148, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip6_vti0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@dev, @ipv4=@empty, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_to_bond\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@broadcast, @gre_key}}}, {{@ipv6={@mcast2, @private1, [], [], 'gretap0\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv6=@remote, @icmp_id, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private0, [], [], 'vlan1\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@mcast1, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) 18:22:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) 18:22:48 executing program 1: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 18:22:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{0x0}, {&(0x7f0000001180)='A', 0x1}], 0x2}, 0x0) 18:22:48 executing program 4: syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@nouser_xattr}]}) 18:22:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x2e, 0x0, &(0x7f00000001c0)) 18:22:48 executing program 5: r0 = io_uring_setup(0x66b9, &(0x7f0000000040)) io_uring_setup(0x2697, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 18:22:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 18:22:48 executing program 1: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 18:22:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) 18:22:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x2dc1823fb2faa525}, 0x14}}, 0x0) 18:22:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1279, 0x0) 18:22:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'wg0\x00', {0x2, 0x0, @initdev}}) 18:22:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000040)="0e", 0x1) 18:22:49 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x10000000) 18:22:49 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x6, &(0x7f0000000500)=@framed={{}, [@generic, @map_idx_val]}, &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec0000000001010800000000000000000300000408001a400000008108000c400000000148000e801400018008000100ac1e010108000200e00000010c00028005000100210000000c000280050001002f0000000600034000020000060003400001000006000340000000000800084000000001100017006b4b532d000004010000000120000d8008000200ac1e010114000500fe8000000000000889319300000000aa400002"], 0xec}}, 0x0) 18:22:49 executing program 4: syz_clone3(&(0x7f0000000300)={0x4000800, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/250, 0xfa, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x1}, 0x58) 18:22:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) 18:22:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10001, 0x0, 0x0) 18:22:49 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 513.070665][T22801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 513.107913][T22801] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. 18:22:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 18:22:49 executing program 4: r0 = epoll_create(0x3) epoll_wait(r0, &(0x7f0000002240)=[{}], 0x1, 0x0) 18:22:49 executing program 0: statx(0xffffffffffffffff, 0x0, 0x0, 0xa7bf3d74ebaaeb6a, 0x0) 18:22:49 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340), 0x10) 18:22:49 executing program 1: io_uring_setup(0x6c24, &(0x7f0000000180)={0x0, 0x0, 0x8}) 18:22:49 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @local}}}}) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xaaaab7d, &(0x7f0000000380)=[{&(0x7f0000000100)="b1f68d5f09146d0d8d11dcaede4794e3a2ca431e325dd8c6f277ba0269d78b36f198bf77b43c24", 0x27, 0x9}, {&(0x7f0000000140)="16ebb0", 0x3, 0xfbd}], 0x1408, &(0x7f00000001c0)={[{@i_version}, {@jqfmt_vfsold}, {@discard}, {@nodelalloc}, {@block_validity}, {@init_itable_val}]}) 18:22:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 18:22:49 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffe1, 0x0) 18:22:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x5}, 0x48) 18:22:49 executing program 5: syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@discard}]}) 18:22:49 executing program 3: syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x4c09a9273e4b2609, &(0x7f0000001540)) 18:22:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec0000000001010800000000000000000300000408001a400000008108000c400000000148000e801400018008000100ac1e010108000200e00000010c00028005000100210000000c000280050001002f0000000600034000020000060003400001000006000340000000000800084000000001100017006b4b532d000004010000000120000d8008000200ac1e010114000500fe8000000000000889319300000000aa400002800c000280050001005000000006000340000200001400018008000100ffffffff080002007f00000106000340000400000c0002800500010011000000060012"], 0xec}}, 0x0) 18:22:50 executing program 0: syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a80)={[{@sb={'sb', 0x3d, 0x4}}], [{@context={'context', 0x3d, 'staff_u'}}]}) 18:22:50 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x900, 0x28120003) 18:22:50 executing program 4: pselect6(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x2c}, 0x0, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:22:50 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{}, {}, {0x6}]}) 18:22:50 executing program 1: bpf$LINK_GET_FD_BY_ID(0xc, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) [ 514.038290][T22832] ext2: Unknown parameter 'context' [ 514.142295][ T25] audit: type=1326 audit(1644862970.268:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22839 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3cea2f059 code=0x0 18:22:50 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1, 0x8001}, {&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}, {&(0x7f0000000380)='*', 0x1}, {&(0x7f0000000480)='F', 0x1}, {&(0x7f00000004c0)='r', 0x1}], 0x0, 0x0) 18:22:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3}, 0x48) 18:22:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) 18:22:50 executing program 0: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/158, 0x9e) 18:22:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 18:22:50 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x400) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x1) 18:22:50 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0xffffffffffffffff, 0x0, 0x10, r0, 0x10000000) 18:22:50 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, &(0x7f0000000880)) 18:22:50 executing program 5: io_uring_setup(0xfd6, &(0x7f0000000080)={0x0, 0x0, 0x4}) 18:22:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) 18:22:50 executing program 1: r0 = getpid() ptrace$poke(0xffffffffffffffff, r0, 0x0, 0x0) [ 514.659912][T22852] loop2: detected capacity change from 0 to 62194 18:22:50 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0xe07, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) 18:22:50 executing program 2: socket(0x1d, 0x0, 0x566) 18:22:50 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f0000000480)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 514.801463][T22859] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 18:22:50 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000ec0)=[{&(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "39629d25fdab8d1d2ea3b5085faad401e5cb70b89190c7763d5173ac2479897c7ded0cc125be0f62c1970952b0bbce315ec04a84be9d023ed4e08ca54cb436"}, 0x60, 0x0}], 0x1, 0x0) 18:22:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @local}}]}, 0x210) 18:22:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, &(0x7f0000000040)) [ 514.897661][ T4291] I/O error, dev loop2, sector 61952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 18:22:51 executing program 2: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)) 18:22:51 executing program 1: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{0x0, 0x0, 0x3962f2f7}, {0x0}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {0x0}, {0x0}], 0x0, &(0x7f0000000880)={[{@journal_dev}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}]}) 18:22:51 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, &(0x7f0000000880)) 18:22:51 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081272, 0x0) 18:22:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) 18:22:51 executing program 3: bpf$LINK_GET_FD_BY_ID(0x1a, 0x0, 0x0) 18:22:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xffffff00], [], '\x00', 'veth0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010101, 'dummy0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000880)) [ 515.132731][T22878] loop1: detected capacity change from 0 to 62194 18:22:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)='y', 0x1}, {&(0x7f0000000180)="dc", 0x1}, {&(0x7f0000001180)='A', 0x1}], 0x3}, 0x0) [ 515.212510][T22885] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 515.222519][T22878] ext4: Unknown parameter 'rootcontext' 18:22:51 executing program 3: syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) 18:22:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000500)=@framed={{}, [@generic]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 515.264782][T22888] x_tables: duplicate underflow at hook 3 18:22:51 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, &(0x7f0000000880)) 18:22:51 executing program 5: syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)={[{@noacl}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 18:22:51 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000180)=@raw=[@map_val], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:51 executing program 1: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{0x0, 0x0, 0x3962f2f7}, {0x0}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {0x0}, {0x0}], 0x0, &(0x7f0000000880)={[{@journal_dev}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}]}) 18:22:51 executing program 0: bpf$LINK_GET_FD_BY_ID(0x1b, 0x0, 0x0) 18:22:51 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000640)='memory.numa_stat\x00', 0x0, 0x0) 18:22:51 executing program 2: bpf$LINK_GET_FD_BY_ID(0x2, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) [ 515.462408][T22898] loop1: detected capacity change from 0 to 62194 [ 515.495912][T22902] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 515.504616][T22898] ext4: Unknown parameter 'rootcontext' 18:22:51 executing program 4: syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, &(0x7f0000000880)) 18:22:51 executing program 1: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{0x0, 0x0, 0x3962f2f7}, {0x0}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {0x0}, {0x0}], 0x0, &(0x7f0000000880)={[{@journal_dev}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}]}) 18:22:51 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0}, 0x0) accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x0, 0x0, &(0x7f0000000f40)='GPL\x00', 0x1, 0x61, &(0x7f0000000f80)=""/97, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) 18:22:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000040)={'gre0\x00', 0x0}) 18:22:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {}, 0x0, [0x1, 0x8, 0x15e, 0x400, 0x7, 0xfffffe00, 0x1000, 0xff, 0x40, 0x7, 0x5, 0x8000, 0xffffffff, 0x8, 0x9, 0x2, 0x30000, 0x6, 0x3, 0x1, 0x0, 0x7, 0x5, 0x1, 0x51, 0x1, 0x5, 0xdca, 0x1, 0x8, 0xad2, 0x4, 0x6, 0x9, 0xff, 0x9a000000, 0xe72fb25, 0x1f4, 0xae1, 0x1, 0x401, 0x80000001, 0xfed, 0x80000001, 0x7f, 0x5, 0x10000, 0x0, 0x9, 0x4], [0x6, 0x7dc, 0x5e, 0x200, 0x9, 0x1, 0xfffffffa, 0x5, 0x6, 0x7fffffff, 0x1, 0xa8, 0xffffffff, 0x8, 0xa87, 0x4, 0xffffffff, 0x80, 0x0, 0x9, 0x41e, 0x3f, 0x81, 0x5, 0x38, 0x1, 0x4, 0xfff, 0xfffffff9, 0xfff, 0xcf, 0x9, 0x1ff, 0x57, 0x9, 0xae, 0x780, 0x2, 0x3f, 0x0, 0x10001, 0x4, 0xa385, 0xfffffffa, 0x1f, 0x21, 0x9, 0xfffffbff, 0xffffb5e8, 0x10001, 0x8, 0x8a, 0x0, 0x4, 0xb054, 0x5, 0x4, 0x3, 0xbc6, 0x2d09, 0x1, 0x2, 0x9, 0x7f], [0x3, 0x6, 0xfffffc00, 0x8, 0x1000, 0x51254e6b, 0x80, 0x7, 0x7, 0xffffff5a, 0x1, 0x7766, 0x0, 0x0, 0x5f, 0xd3f5, 0x8, 0x1, 0x1, 0x8, 0x50, 0x8, 0x1d, 0x6, 0xebdb, 0x4, 0x7, 0xb8, 0x7, 0x8, 0x4, 0xa37d, 0x2, 0x5, 0x3, 0x8, 0x2, 0x42, 0x9, 0xffffff00, 0x0, 0xffffffff, 0x4, 0x5, 0x1, 0x7ff, 0x4, 0x400, 0x7ff, 0x0, 0x9, 0x3ff, 0x3ff, 0x5, 0x0, 0xfa79, 0x6, 0x81, 0x3, 0x9462, 0x5, 0x0, 0xfff, 0x7], [0x0, 0x4fe9, 0x4, 0x7, 0xfff, 0x401, 0x80000001, 0x0, 0x8, 0xca, 0x393a, 0x4, 0x1, 0x8, 0x8, 0x7, 0x7ff, 0x7, 0xfc98, 0x6, 0x9180, 0x101, 0x1, 0xc9f7, 0x4, 0x101, 0x401, 0x6, 0xfffffff7, 0x401, 0x7fffffff, 0x9, 0xffff, 0x0, 0x1, 0x3, 0xb5, 0x80000001, 0x1000, 0x3ff, 0x7fff, 0x1, 0x6, 0xffff, 0x6, 0x1, 0x10, 0xb3, 0x0, 0x8000, 0xf79, 0x59, 0x9, 0x6, 0x80, 0x6, 0x7, 0xe9, 0x1, 0x9, 0x6, 0x0, 0x645, 0x81]}, 0x45c) 18:22:51 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xb}]}}, &(0x7f0000000080)=""/4096, 0x26, 0x1000, 0x1}, 0x20) [ 515.689636][T22915] loop1: detected capacity change from 0 to 62194 [ 515.728130][T22914] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 18:22:51 executing program 2: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) 18:22:51 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 18:22:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', 0x0}) 18:22:51 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 515.740913][T22915] ext4: Unknown parameter 'rootcontext' 18:22:52 executing program 1: pipe2(0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{0x0, 0x0, 0x3962f2f7}, {0x0}, {&(0x7f0000000480)="46fd171fc4643795e142290cba6029", 0xf, 0x6}, {0x0}, {0x0}], 0x0, &(0x7f0000000880)={[{@journal_dev}], [{@smackfsroot}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}]}) 18:22:52 executing program 2: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], '\x00', 'veth0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'dummy0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 18:22:52 executing program 0: r0 = io_uring_setup(0x40d4, &(0x7f0000000040)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x10000000) 18:22:52 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:22:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/13, @ANYRES32]}) [ 515.933919][T22930] loop1: detected capacity change from 0 to 62194 [ 515.992118][T22930] ext4: Unknown parameter 'rootcontext' 18:22:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000100)='y', 0x1}, {&(0x7f0000000180)="dc", 0x1}, {&(0x7f0000001180)='A', 0x1}], 0x3}, 0x0) 18:22:52 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001840)={&(0x7f0000001800)='.\x00'}, 0x10) 18:22:52 executing program 0: bpf$LINK_GET_FD_BY_ID(0xe, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:52 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 18:22:52 executing program 4: statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) 18:22:52 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1, 0x8001}, {&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}, {&(0x7f0000000380)='*', 0x1}, {&(0x7f0000000480)='F', 0x1}, {&(0x7f00000004c0)='r', 0x1, 0x1000}], 0x0, 0x0) 18:22:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000140)) 18:22:52 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) 18:22:52 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmmsg$nfc_llcp(r0, 0x0, 0x0, 0x0) 18:22:52 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0xb5, 0x10001, 0x7, 0x6, 0xe99, 0x0, 0x0, 0x8e}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) 18:22:52 executing program 0: r0 = socket$pptp(0x18, 0x1, 0x2) accept4$unix(r0, 0x0, 0x0, 0x0) [ 516.225693][T22950] loop1: detected capacity change from 0 to 62194 18:22:52 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x18289aceb20b7fe5, 0x1) 18:22:52 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1, 0x8001}, {&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}, {&(0x7f0000000380)='*', 0x1}, {&(0x7f0000000480)='F', 0x1}, {&(0x7f00000004c0)='r', 0x1, 0x1000}, {&(0x7f0000000540)="a6", 0x1}], 0x0, 0x0) 18:22:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa}, 0x48) 18:22:52 executing program 4: bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 18:22:52 executing program 2: io_uring_setup(0x6c24, &(0x7f0000000180)={0x0, 0xf2c6, 0x8}) [ 516.355833][ T4291] I/O error, dev loop1, sector 61952 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 18:22:52 executing program 1: socket(0xa, 0x1, 0xf0fa) 18:22:52 executing program 0: bpf$LINK_GET_FD_BY_ID(0x14, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:52 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) 18:22:52 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101287, 0x0) 18:22:52 executing program 2: syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001380)={[], [{@seclabel}, {@obj_user}]}) [ 516.491807][T22973] loop3: detected capacity change from 0 to 62194 18:22:52 executing program 0: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40280) 18:22:52 executing program 5: getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) 18:22:52 executing program 3: bpf$LINK_GET_FD_BY_ID(0x22, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) 18:22:52 executing program 1: io_uring_setup(0x6c24, &(0x7f0000000180)={0x0, 0xf2c6, 0x8}) io_uring_setup(0x4428, &(0x7f0000000200)={0x0, 0x0, 0x2}) 18:22:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7}, 0x48) 18:22:52 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000007c0), 0x402, 0x0) 18:22:52 executing program 5: bpf$LINK_GET_FD_BY_ID(0x8, 0x0, 0x0) 18:22:52 executing program 3: bpf$LINK_GET_FD_BY_ID(0x21, 0x0, 0x0) 18:22:52 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@errors_continue}, {@test_dummy_encryption}]}) 18:22:52 executing program 1: bpf$LINK_GET_FD_BY_ID(0x22, 0x0, 0x0) 18:22:52 executing program 4: bpf$LINK_GET_FD_BY_ID(0x4, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) 18:22:53 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 18:22:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1277, 0x0) 18:22:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'gre0\x00', 0x0}) 18:22:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x85, 0x981, 0x0, 0x40, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x0, 0x8, 0x0, 0x8000, 0x800}, @generic={0x40, 0x7, 0x6, 0x400, 0xb90}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x68, &(0x7f00000005c0)=""/104, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0xa, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 18:22:53 executing program 5: syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)={[{@noacl}, {@fault_injection}]}) [ 516.925257][T23007] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 18:22:53 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept$unix(r0, 0x0, 0x0) 18:22:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000040)) 18:22:53 executing program 1: syz_mount_image$erofs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2002048, &(0x7f0000000780)) 18:22:53 executing program 2: syz_open_dev$loop(&(0x7f0000000600), 0x0, 0x400) 18:22:53 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 18:22:53 executing program 4: syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)={[{@noacl}]}) 18:22:53 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$unix(r0, 0x0, 0x0) 18:22:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) 18:22:53 executing program 3: pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0xb5}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) 18:22:53 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0xb5}, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={[0x8]}, 0x8}) 18:22:53 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000000c0)={'batadv_slave_1\x00'}) 18:22:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter, 0x48) 18:22:53 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x100, 0x28120003) 18:22:53 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x3, 0x0, 0x0, &(0x7f0000000080)) 18:22:53 executing program 1: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'dummy0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff6c) 18:22:53 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, 0x0) 18:22:53 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xffff2a45}, {}, {0x6}]}) 18:22:53 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 18:22:53 executing program 0: io_uring_setup(0xeb3, &(0x7f0000000fc0)) 18:22:53 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4000805) 18:22:53 executing program 5: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0)=0xffffffffffffffff, 0x200000c4) 18:22:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 18:22:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0x1c}, 0x1c}}, 0x0) 18:22:53 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) 18:22:53 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x10, r0, 0x10000000) 18:22:53 executing program 3: syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000100)=""/250, 0xfa, &(0x7f0000000200)=""/32, 0x0}, 0x58) [ 517.542612][ T25] audit: type=1326 audit(1644862973.668:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23055 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe68358f059 code=0x0 18:22:53 executing program 5: bpf$LINK_GET_FD_BY_ID(0x18, 0x0, 0x0) 18:22:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0x1c}, 0x1c}}, 0x0) 18:22:53 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x301200, 0x0) 18:22:53 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 18:22:53 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) 18:22:53 executing program 5: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1, 0x8001}, {&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}, {&(0x7f0000000480)='F', 0x1}, {&(0x7f00000004c0)='r', 0x1, 0x1000}, {&(0x7f0000000540)="a6", 0x1}], 0x0, 0x0) 18:22:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0x1c}, 0x1c}}, 0x0) 18:22:53 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffec9) 18:22:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=ANY=[@ANYBLOB="ec0000000001010800000000000000000300000408001a400000008108000c400000000148000e801400018008000100ac1e010108000200e00000010c00028005000100210000000c000280050001002f0000000600034000020000060003400001000006000340000000000800084000000001100017006b4b532d000004010000000120000d8008000200ac1e010114000500fe8000000000000889319300000000aa400002800c000280050001005000000006000340000200001400018008000100ffffffff080002007f00000106000340000400000c000280050001001100000006"], 0xec}}, 0x0) 18:22:53 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:22:53 executing program 4: bpf$LINK_GET_FD_BY_ID(0x9, 0x0, 0x0) 18:22:53 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000180)) 18:22:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@mpls_getroute={0x1c}, 0x1c}}, 0x0) 18:22:54 executing program 3: syz_mount_image$erofs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@acl}]}) 18:22:54 executing program 2: r0 = socket(0x18, 0x0, 0x2) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) 18:22:54 executing program 1: bpf$LINK_GET_FD_BY_ID(0x7, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:54 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:54 executing program 0: bpf$LINK_GET_FD_BY_ID(0xa, 0x0, 0x0) 18:22:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x0, 0x4, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}}, 0x68}}, 0x0) 18:22:54 executing program 3: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000000300)="c6", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}], 0x0, 0x0) 18:22:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x8, 0x2, 0x23) 18:22:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 18:22:54 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, &(0x7f0000000780)=[{0x0}], 0x0, 0x0) 18:22:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000080)) 18:22:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)) 18:22:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x301}, 0x14}}, 0x0) [ 518.193751][T23116] loop3: detected capacity change from 0 to 62194 18:22:54 executing program 5: socket$inet(0x2, 0x2, 0x6) 18:22:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001240)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000001200)=[{0x0}, {0x0}, {&(0x7f0000001180)='A', 0x1}], 0x3}, 0x0) 18:22:54 executing program 0: bpf$LINK_GET_FD_BY_ID(0xe, 0x0, 0x0) 18:22:54 executing program 3: syz_open_dev$evdev(&(0x7f00000004c0), 0x0, 0x400101) 18:22:54 executing program 2: socket(0x10, 0x0, 0xffffffff) 18:22:54 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[{&(0x7f0000000240)="03", 0x1}, {&(0x7f0000000340)='a', 0x1, 0x3962f2f7}], 0x0, 0x0) 18:22:54 executing program 4: bpf$LINK_GET_FD_BY_ID(0x9, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:54 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 18:22:54 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x0, 0x0, 0x0, 0x1048}, 0x48) 18:22:54 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000240)={'syztnl1\x00', 0x0}) [ 518.430405][T23138] loop1: detected capacity change from 0 to 62194 18:22:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x3, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x40, 0x1, 0xd0c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0xf}, 0x48) pipe2(0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x10000000) socket(0x8, 0x2, 0x23) socket$inet_udp(0x2, 0x2, 0x0) pipe2(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000007f00000000001000060000008520", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x8, 0x4, 0x98}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x80) 18:22:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x5c8, 0x148, 0x280, 0xffffffff, 0x148, 0x148, 0x4f8, 0x4f8, 0xffffffff, 0x4f8, 0x4f8, 0x5, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip6_vti0\x00', 'batadv_slave_1\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@frag={{0x30}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@dev, @ipv4=@empty, @port, @gre_key}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'veth1_to_bond\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private0, @ipv4=@broadcast, @gre_key}}}, {{@ipv6={@mcast2, @private1, [], [], 'gretap0\x00', 'lo\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@private0, @ipv6=@remote, @icmp_id, @icmp_id}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @private0, [], [], 'vlan1\x00', 'ip_vti0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "03b9"}}, @common=@eui64={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast1, @ipv6=@mcast1, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) 18:22:54 executing program 5: bpf$LINK_GET_FD_BY_ID(0x10, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 18:22:54 executing program 2: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f0000000780)=[{&(0x7f0000000240)}, {0x0}, {0x0}], 0x0, &(0x7f0000000880)={[{@auto_da_alloc}, {@journal_dev}], [{@fsmagic}, {@obj_user={'obj_user', 0x3d, ')@-\\)#'}}, {@pcr={'pcr', 0x3d, 0x3c}}]}) 18:22:54 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c076}, 0x80) 18:22:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r0, 0x0, 0x0) [ 518.649800][T23152] x_tables: duplicate underflow at hook 1 18:22:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00'}) [ 518.696830][T23155] ext4: Unknown parameter 'fsmagic' 18:22:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 18:22:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000640)={'sit0\x00', 0x0}) 18:22:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_submit(r1, 0x3, &(0x7f00000004c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, 0x0, 0x0]) 18:22:54 executing program 2: socket(0x18, 0x0, 0x7ff) 18:22:54 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x0) 18:22:55 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x10000000) 18:22:55 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x0) 18:22:55 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, r0, 0x10000000) 18:22:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/cpufreq', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 18:22:55 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 18:22:55 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) 18:22:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f00000000c0)='vxcan1\x00'}) 18:22:55 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/cpufreq', 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x0, 0x10, r0, 0x0) 18:22:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={&(0x7f00000005c0), 0xc, 0x0}, 0x0) 18:22:55 executing program 5: r0 = socket(0x2c, 0x3, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 18:22:55 executing program 1: socket$inet6(0xa, 0x0, 0xfffffffb) 18:22:55 executing program 0: openat$mice(0xffffffffffffff9c, 0x0, 0x40002) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x400, 0x0, 0x2}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:22:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 18:22:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={&(0x7f00000005c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) 18:22:55 executing program 4: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 18:22:55 executing program 1: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b24, 0x0) 18:22:55 executing program 3: timer_create(0x2, &(0x7f0000000100)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) 18:22:55 executing program 2: syz_io_uring_setup(0xe30, &(0x7f00000022c0), &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 18:22:55 executing program 5: r0 = userfaultfd(0x80801) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 18:22:55 executing program 0: fchownat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xee01, 0x0) 18:22:55 executing program 4: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_gettime(0x0, &(0x7f0000000280)) 18:22:55 executing program 3: socketpair(0x6, 0x0, 0x0, &(0x7f0000000280)) 18:22:55 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x0, 0x10, 0x2, 0x32d}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:22:55 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="23359898220000000000000000f9", @ANYRES16=0x0, @ANYBLOB="000129bd700002dcdf2506000000060028000300000008000b003f00000008003a00060000000500330000000000793f04a9770c461fcac848665891451ac2d15987c79818758a8ffff85b9733b27d8b3ba23d22b667f02a21d900f58defcc543ef441125aab84bc3bf916a7e367e5e582412ad2c65a629fa47d51bf7722aef1e82972ee"], 0x34}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200), 0x0) 18:22:55 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 18:22:55 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40025b0c, 0x0) 18:22:55 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) userfaultfd(0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x0, 0x10, 0x2, 0x32d}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) [ 519.451351][T23220] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 18:22:55 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) 18:22:55 executing program 0: r0 = socket(0x18, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) 18:22:55 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(r0, 0x0, 0xe, 0x0) 18:22:55 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) 18:22:55 executing program 3: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="23359898220000000000000000", @ANYRES16=0x0, @ANYBLOB="0001"], 0x34}}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=[&(0x7f0000000140)='\xf7)]!@.!}#(/,\\*--\x00', &(0x7f0000000080)='@(^\x00'], 0x0) 18:22:56 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xf7, 0x1}, 0x48) 18:22:56 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/cpufreq', 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 18:22:56 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000040)={@multicast2, @multicast1, @dev}, 0xc) 18:22:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000100)) 18:22:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 18:22:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x102, 0x0, 0x0) 18:22:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:22:56 executing program 1: openat$mice(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 18:22:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 18:22:56 executing program 2: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) 18:22:56 executing program 3: r0 = socket(0x11, 0x3, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 18:22:56 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 18:22:56 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000600)) 18:22:56 executing program 1: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe045, 0x0) 18:22:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, 0x0, 0x0) 18:22:56 executing program 2: shmget(0x1, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 18:22:56 executing program 0: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:22:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0xffffffe0}, 0xc) 18:22:57 executing program 3: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 18:22:57 executing program 5: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[0xfffffffffffffffd], 0x0, 0x0) 18:22:57 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) read$char_usb(r0, &(0x7f0000000500)=""/169, 0xa9) 18:22:57 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 18:22:57 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f00000023c0)=""/200) 18:22:57 executing program 5: futex(&(0x7f0000000000)=0x1, 0xc, 0x1, 0x0, &(0x7f00000000c0), 0x0) 18:22:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local}, {0x0, @multicast}, 0x18, {0x2, 0x0, @dev}, 'ipvlan1\x00'}) 18:22:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) 18:22:57 executing program 2: r0 = socket(0x1d, 0x2, 0x7) accept$alg(r0, 0x0, 0x0) 18:22:57 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/cpufreq', 0x0, 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) 18:22:57 executing program 5: clock_gettime(0x9f4e12db9e147232, 0x0) 18:22:57 executing program 4: openat$mice(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0), &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:22:57 executing program 1: getrusage(0x0, &(0x7f0000000000)) getrusage(0xffffffffffffffff, &(0x7f0000000600)) 18:22:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, 0x2a4}) 18:22:57 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 18:22:57 executing program 0: add_key$user(&(0x7f0000000900), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000640)="86", 0x1, 0xfffffffffffffffd) 18:22:57 executing program 1: r0 = socket(0x18, 0x0, 0x0) connect$caif(r0, 0x0, 0x0) 18:22:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:22:57 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) connect$can_j1939(r0, &(0x7f0000000240), 0x18) 18:22:57 executing program 4: select(0x40, &(0x7f0000000fc0), &(0x7f0000001000)={0x2}, 0x0, 0x0) 18:22:57 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x5000}) 18:22:57 executing program 5: semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000000)=""/4096) semctl$SEM_STAT(0xffffffffffffffff, 0x3, 0x12, &(0x7f0000001000)=""/251) r0 = semget$private(0x0, 0x3, 0x400) semctl$GETVAL(r0, 0x0, 0xc, &(0x7f0000001100)=""/118) semctl$GETZCNT(r0, 0x4, 0xf, &(0x7f0000001180)=""/183) r1 = semget$private(0x0, 0x0, 0xf68) semctl$SEM_STAT_ANY(r1, 0x3, 0x14, &(0x7f0000001240)=""/80) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000012c0)=""/171) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000001380)=""/63) semctl$SEM_STAT_ANY(r1, 0x4, 0x14, &(0x7f00000013c0)=""/4096) r2 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f00000023c0)=""/200) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f00000024c0)=""/119) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000002540)=""/106) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:22:57 executing program 3: r0 = socket(0x11, 0x3, 0x0) bind$bt_rfcomm(r0, 0x0, 0x0) 18:22:57 executing program 4: userfaultfd(0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x32d}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:22:57 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) 18:22:57 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x40002) syz_io_uring_setup(0xe30, &(0x7f00000022c0), &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:22:57 executing program 0: socket$inet(0x2, 0x0, 0x764) 18:22:57 executing program 1: add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="dd", 0x1, 0xfffffffffffffffc) 18:22:57 executing program 3: r0 = socket(0x18, 0x0, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, 0x0, 0x0) 18:22:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000180)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'fo\x00'}, 0x2c) 18:22:57 executing program 1: r0 = socket(0x18, 0x0, 0x1) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, 0x0, 0x0) 18:22:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000e00)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000e40)=0x40) 18:22:58 executing program 4: socket$inet(0x2, 0x6, 0x8) 18:22:58 executing program 2: openat$mice(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) 18:22:58 executing program 3: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d22000200000009050502"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40015b0b, 0x0) 18:22:58 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, &(0x7f00000003c0)) 18:22:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @local}, {0x6, @multicast}, 0x18, {0x2, 0x0, @dev}, 'ipvlan1\x00'}) [ 521.956995][T23338] IPVS: set_ctl: invalid protocol: 0 172.30.0.6:20003 18:22:58 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x200) 18:22:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x11d8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400003, 0x3}, 0x48) 18:22:58 executing program 1: add_key$user(&(0x7f0000000900), &(0x7f0000000940)={'syz', 0x1}, &(0x7f0000000980)="fe", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="9e", 0x1, 0xfffffffffffffffe) 18:22:58 executing program 0: syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) 18:22:58 executing program 1: syz_io_uring_setup(0xe30, &(0x7f00000022c0), &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0, 0x0) 18:22:58 executing program 5: r0 = socket(0x18, 0x0, 0x1) connect$caif(r0, 0x0, 0x0) 18:22:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)=""/98) 18:22:58 executing program 4: keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)={0x0}) 18:22:58 executing program 0: r0 = socket(0x18, 0x0, 0x1) accept$inet(r0, 0x0, 0x0) [ 522.317570][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 522.597664][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 522.727739][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.739627][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 522.749547][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 522.759504][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.772668][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 522.782007][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.794002][ T7] usb 4-1: config 0 descriptor?? 18:22:59 executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) select(0x40, &(0x7f0000000fc0)={0x9}, &(0x7f0000001000)={0x2}, 0x0, &(0x7f0000001080)) 18:22:59 executing program 1: semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) 18:22:59 executing program 2: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40015b0b, 0x0) 18:22:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) 18:22:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400003}, 0x48) 18:22:59 executing program 5: keyctl$dh_compute(0x17, &(0x7f0000000240), &(0x7f0000000280)=""/178, 0xb2, &(0x7f0000000380)={&(0x7f0000000340)={'cbcmac-aes-neon\x00'}}) [ 523.567780][ T7] usb 4-1: usb_control_msg returned -71 [ 523.573367][ T7] usbtmc 4-1:0.0: can't read capabilities 18:22:59 executing program 4: r0 = socket(0x18, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) 18:22:59 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) connect$can_j1939(r0, 0x0, 0x0) [ 523.726156][ T7] usb 4-1: USB disconnect, device number 4 18:22:59 executing program 3: renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x7) 18:22:59 executing program 4: timer_create(0x0, 0x0, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x4, @tid=0xffffffffffffffff}, 0x0) 18:23:00 executing program 0: r0 = socket(0x11, 0x3, 0x0) accept$inet(r0, 0x0, 0x0) 18:23:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={&(0x7f00000005c0), 0xc, &(0x7f00000009c0)={0x0}}, 0x0) 18:23:00 executing program 3: r0 = semget(0x3, 0x2, 0x220) semctl$IPC_RMID(r0, 0x0, 0x0) [ 524.043742][T23376] could not allocate digest TFM handle cbcmac-aes-neon 18:23:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x0) 18:23:00 executing program 0: sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) 18:23:00 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, &(0x7f0000000640)) 18:23:00 executing program 3: r0 = socket(0x18, 0x0, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 18:23:00 executing program 5: fanotify_mark(0xffffffffffffffff, 0x14, 0x0, 0xffffffffffffffff, 0x0) 18:23:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'}) 18:23:00 executing program 5: r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 18:23:00 executing program 3: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:23:00 executing program 0: fchownat(0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x0) 18:23:00 executing program 1: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:23:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) 18:23:00 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40015b13, 0x0) 18:23:00 executing program 1: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00010000"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0105b08, 0x0) 18:23:00 executing program 5: socket(0x2c, 0x3, 0x3ff) 18:23:00 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:23:00 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0, 0x0) 18:23:00 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0xc0045b0f, 0x0) 18:23:00 executing program 5: select(0x0, 0x0, &(0x7f0000001000), 0x0, &(0x7f0000001080)) 18:23:00 executing program 4: syz_usb_connect(0x0, 0x3f, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b06, 0x0) 18:23:00 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 18:23:00 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 18:23:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 524.767597][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd 18:23:01 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getpeername$packet(r0, 0x0, 0x0) 18:23:01 executing program 2: r0 = socket(0x18, 0x0, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x0, "3418410097032c0920b06f31d0d89513"}, 0x18) [ 525.017807][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 525.137753][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.158112][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.203337][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 525.246608][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.273175][ T7] usb 2-1: config 0 descriptor?? 18:23:02 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) userfaultfd(0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x400, 0x10, 0x0, 0x32d}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:23:02 executing program 3: munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 18:23:02 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/sda', 0x0, 0x0) 18:23:02 executing program 2: r0 = gettid() ptrace$poke(0xffffffffffffffff, r0, 0x0, 0x0) 18:23:02 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001000000000904000003fe03010009058d22000200000009050502"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x40045b0a, 0x0) 18:23:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f00000000c0)) [ 526.034363][ T7] usb 2-1: USB disconnect, device number 12 18:23:02 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b23, 0x0) 18:23:02 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) 18:23:02 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x0, 0x0}) 18:23:02 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, 0x0, 0x0) 18:23:02 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) r0 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) syz_io_uring_setup(0xe30, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:23:02 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/246, 0x7000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x200004, 0x4) 18:23:02 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/module/cpufreq', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/188, 0xbc) 18:23:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 18:23:02 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) 18:23:02 executing program 0: execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)=[&(0x7f0000000140)='\xf7)]!@.!}#(/,\\*--\x00'], 0x0) [ 526.347745][ T3676] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 526.637590][ T3676] usb 5-1: Using ep0 maxpacket: 8 [ 526.777787][ T3676] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.788424][ T3676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.798205][ T3676] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.812099][ T3676] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.825074][ T3676] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.840464][ T3676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.851943][ T3676] usb 5-1: config 0 descriptor?? 18:23:03 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x66, 0x0, &(0x7f0000000500)) 18:23:03 executing program 3: syz_io_uring_setup(0xe30, &(0x7f00000022c0), &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000002340), &(0x7f0000002380)) 18:23:03 executing program 1: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0}, 0x20) 18:23:03 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000002000)=[{0x0, 0x0, 0x0}], 0x1, 0x4891) 18:23:03 executing program 0: ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="b5f4101f90bfa39e3607a88e6439ba0b90db26218abfd00cb12a5d742cb527a15d6248978ee922de9348b093b0d4d9955710075e11e2b0c83675f3a4f0d380dabb371ded663f96b0bf", 0x49, 0x7c53}, {&(0x7f0000000100)="29d9d77cb2a539a6c99ee39bc30ea2f0a38129c6ab7f27bcc6bb15e72a23fb9fc844ff361ab1f615a2ea153d673aa623d569f12b31c13b80dfe22690a2de4560cfb2654aff02984a28f1002eb870fbf5634a58c8566d840775955643180fc3a2ce84ef135e067a7fc24624e4180e49b5b3d6d391e45a0ee8022df7b8683d8db3433bc1b45321db464d31dd1866791b4564cd264c97b0ae4e38c046820ccdfc4cac3278aa4f9feb492acfe1e4da857cb31df1f270aef53761b9ed96921561a3d4c0fcb7d90c1004a5937b01121ccda1089cfb6535c2aab7823854c81a8d4327b4d31e8bff5e", 0xe5, 0xf92}], 0x40, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x452d}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@commit={'commit', 0x3d, 0xfffffffffffffffd}}, {@i_version}, {@errors_continue}, {@nodelalloc}, {@test_dummy_encryption}, {@data_err_ignore}], [{@appraise}]}) statx(r0, &(0x7f0000000300)='./file0\x00', 0x0, 0x200, &(0x7f0000000340)) 18:23:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000980)=[{0x0, 0x0, 0x400}], 0x0, &(0x7f0000000a80)={[{@sb={'sb', 0x3d, 0x4}}], [{@context={'context', 0x3d, 'staff_u'}}]}) [ 527.617749][ T3676] usb 5-1: usb_control_msg returned -71 [ 527.623370][ T3676] usbtmc 5-1:0.0: can't read capabilities [ 527.650020][T23484] loop2: detected capacity change from 0 to 4 18:23:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 527.662282][T23485] loop0: detected capacity change from 0 to 124 18:23:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) 18:23:03 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 527.705252][ T3676] usb 5-1: USB disconnect, device number 4 [ 527.726955][T23484] ext2: Unknown parameter 'context' [ 527.739213][T23485] EXT4-fs: Invalid want_extra_isize 17709 18:23:03 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:04 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) 18:23:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) 18:23:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x0, 0x0, 0x6}, {0x1}]}) 18:23:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) 18:23:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x0, 0x0, 0x6}, {0x1}]}) 18:23:06 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) 18:23:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) 18:23:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x0, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}]}) 18:23:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xa, 0x0, 0x0, 0x6}]}) 18:23:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) 18:23:07 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) [ 531.726417][T23645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:23:07 executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) 18:23:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:08 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) 18:23:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000), 0x1) sendto$inet6(r0, &(0x7f00000003c0)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="e8", 0x19fff, 0x0, 0x0, 0x0) 18:23:09 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) mknodat$null(r0, 0x0, 0x0, 0x103) 18:23:09 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) io_submit(0x0, 0x0, &(0x7f0000001500)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) 18:23:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1e00, 0x0, 0x0, "eb7a844629140acd1f757bc23582a8ba117c33"}) dup3(r1, r0, 0x0) 18:23:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:09 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB='/'], &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x200f080, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x7) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0xafe, 0x1, 0x18000000, 0x101, 0x7, "17008f67324a7adc7f91ced6fa231e5f1a0862"}) ioctl$TIOCSBRK(r0, 0x5427) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @local}, 0x2, 0x1, 0x3, 0x1}}, 0x80) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) syz_open_pts(r3, 0x80000) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_pts(r2, 0x40000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x10) [ 533.183165][T23717] loop2: detected capacity change from 0 to 87 18:23:09 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)) 18:23:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 18:23:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) dup2(r1, r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_io_uring_setup(0x3773, &(0x7f00000005c0), &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000004c0)=@un=@abs}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r3, 0x2ff, 0x11c, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x20802) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xb) r7 = syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x5, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="f688bfe3f72d5559740742a14919ba7e010d49416918fec87371d575e89cf5c2a1676e83acbcfabf14aaea854349388fbb99a360a45941ef4b6bd4152dee3bfc0dd338ca1de83e38ba95cefa105c0658f0d1769b36f35672caa0f0c56b9b61d867243b2c7c6a20e689cf1651c6332c3b8e7f1dcada511cf7270b38b18d8f217abe9fdaf200388e6a526ce34d46aace44c33583707177ae2847d9056c7f9b7c6ad54fdb13cb817237009666ef8fe55805940bcdafe6a099adb4a89a9412b81d3844487d42467c9f1fe4ebf53f5d828354287e2534254924acec82321eda989e4eb958679fb1b0fd970205", 0xea, 0x4}, {&(0x7f00000002c0)="60c1b9", 0x3, 0x7ff}], 0x10400, &(0x7f0000000340)={[{@quota}, {@noquota}, {}, {@resize}, {@quota}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) dup3(r0, r7, 0x0) 18:23:09 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200", 0x12}], 0x0, &(0x7f0000000080)=ANY=[]) mknodat$null(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x103) [ 533.392558][T23713] sp0: Synchronizing with TNC [ 533.443970][T23721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 533.561098][T23726] sp1: Synchronizing with TNC 18:23:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x1) 18:23:09 executing program 1: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) mknodat$null(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x103) [ 533.669886][T23721] sp0: Synchronizing with TNC [ 533.728621][T23734] loop4: detected capacity change from 0 to 7 [ 533.771315][T23736] loop1: detected capacity change from 0 to 87 18:23:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x1) [ 533.818093][T23736] FAT-fs (loop1): bogus number of reserved sectors [ 533.831938][T23736] FAT-fs (loop1): Can't find a valid FAT filesystem [ 533.856110][T23734] JFS: Cannot determine volume size 18:23:10 executing program 2: r0 = syz_mount_image$msdos(&(0x7f0000001a80), &(0x7f0000000180)='./file1\x00', 0xaea1, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400", 0xc}], 0x0, &(0x7f0000000080)=ANY=[]) mknodat$null(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x103) 18:23:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1e00, 0x0, 0x0, "eb7a844629140acd1f757bc23582a8ba117c33"}) dup3(r1, r0, 0x0) [ 533.919805][T23734] jfs: Unrecognized mount option "defcontext=unconfined_u" or missing value 18:23:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x1) 18:23:10 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xfffe, 0x3, 0x3d3, 0x7, 0x18, "6cf808b23c8fb39d"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x50, r2, 0x100000001) [ 534.093910][T23743] loop2: detected capacity change from 0 to 87 18:23:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r1, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) [ 534.304912][T23743] FAT-fs (loop2): bogus number of reserved sectors [ 534.323284][T23747] sp0: Synchronizing with TNC 18:23:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) [ 534.377645][T23743] FAT-fs (loop2): Can't find a valid FAT filesystem 18:23:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r1, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:10 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:10 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x40049325, 0x0) 18:23:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_open_pts(r1, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:10 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 534.664041][T23763] autofs4:pid:23763:autofs_fill_super: called with bogus options 18:23:10 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0x40049325, 0x0) [ 534.841569][T23767] sp0: Synchronizing with TNC 18:23:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x0, 0x0, 0x1e00, 0x0, 0x0, "eb7a844629140acd1f757bc23582a8ba117c33"}) dup3(r1, r0, 0x0) 18:23:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8943, 0x0) 18:23:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 534.900741][T23772] autofs4:pid:23772:autofs_fill_super: called with bogus options 18:23:11 executing program 2: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x40049325, 0x0) [ 535.084094][T23780] autofs4:pid:23780:autofs_fill_super: called with bogus options 18:23:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) 18:23:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 535.364056][T23788] fuseblk: Bad value for 'fd' 18:23:11 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 535.401299][T23789] sp0: Synchronizing with TNC [ 535.408563][T23790] sp1: Synchronizing with TNC 18:23:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) [ 535.531646][T23797] fuseblk: Bad value for 'fd' 18:23:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18:23:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000180)='.request_key_auth\x00', &(0x7f0000000240)='s\xf1\xdc\xa3!;\xf9p') r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) keyctl$search(0xa, r3, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, r2) 18:23:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x1a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) [ 535.971448][T23805] fuseblk: Bad value for 'fd' 18:23:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:12 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) r2 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000580)='*$(!\'{((\v\x00', r0) add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000480)="4d81b1354f69e9cad1e059afae6f4256d7b32af3ee7dd71f00ebc80fdc1430edb9215c4f89d745d108f289205a1b29f926ce2a11ada391fb792b364012810ac75d82b69a0e0bc4f7d39ae8d1aad75ee9e54f827a60a0bc575f51", 0x5a, r2) keyctl$setperm(0x5, r1, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='keyring\x00', 0xfffffffffffffff9) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @auto=[0xf, 0x66, 0x39, 0x57fd760e85267050, 0x66, 0x62, 0x33, 0x63, 0x63, 0x37, 0x33, 0x35, 0x7, 0x31, 0x36, 0x32]}, &(0x7f0000000640)={0x0, "7d3212f76f5eb9e725fbb924d3d34161853f40dd7ca368387f938ff044666b59d59ef0bdd71edb621ac1a811d03d24b456bb5b9c45bd9d295a958950e3b31a95", 0x35}, 0x48, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 536.029490][T23808] sp0: Synchronizing with TNC [ 536.084046][T23812] sp1: Synchronizing with TNC 18:23:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:12 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/17, 0x11) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x62, 0x33, 0x35, 0x33, 0x61, 0x31, 0x66, 0x63, 0x36, 0x34, 0x38, 0x32, 0x31, 0x33, 0x35]}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1833ded7f60f1c797b6d0f53109223931f7ee0dd474517e97dfa500000000000000002000", 0xfffffffe}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(0xffffffffffffffff, r0, 0x0) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x2, 0x0, &(0x7f0000000080)) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='fscrypt:', r2) keyctl$revoke(0x3, r5) keyctl$setperm(0x5, r4, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000580)="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", 0x1000, r4) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) 18:23:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x4b34, 0xffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) [ 536.332441][T23825] sp0: Synchronizing with TNC 18:23:12 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x4b34, 0xffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) 18:23:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:12 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 536.677367][T23839] sp0: Synchronizing with TNC 18:23:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:13 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) read(r0, &(0x7f00000000c0)=""/17, 0x11) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x62, 0x33, 0x35, 0x33, 0x61, 0x31, 0x66, 0x63, 0x36, 0x34, 0x38, 0x32, 0x31, 0x33, 0x35]}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1833ded7f60f1c797b6d0f53109223931f7ee0dd474517e97dfa500000000000000002000", 0xfffffffe}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) dup3(0xffffffffffffffff, r0, 0x0) r2 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r3, 0x104, 0x2, 0x0, &(0x7f0000000080)) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000240)='blacklist\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)='fscrypt:', r2) keyctl$revoke(0x3, r5) keyctl$setperm(0x5, r4, 0x0) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000580)="cccf29661d4372f590639853a610af10ef5f4ce7591e1a3c89b578a69954b2c331e2fa9b58af0183983eb75b97003f67c7ebabfeb5757410548b9ed44e661dcc0f65d025ab10ba1d7bd28259100580e18b58b5be7f2e3b25c4ac5c14e407f744661869ee2a0768b7cf7f29dc5862e7a82f5bb956b8d4f59798951bd06b0b4ed337476880878f56cd7ba0d59c0cc7a1f8df20ed38b6408e758e2f17d8b513151b24d5941e8bd5efa77f761cadbf477ed6de00b07d2e8f8fa999745a9ba658d2f47f8bc5c2d2e20efe5ef9e0d7658322c5f392ffa9e9b162895ac2ebb62ea2333ffbb4867950e47d17e57ac80818ce4dc2e38af26aaa8103756faaa6f8f53243bf4b83ad399903ffb7bc5056ef82ac5c960326f26fdaf42b757fe8c75d8ef2e909436dca71b5d59b458966e02d90e52f194c731786df904c7e777313ef34f2766c814f8ccb5fd889d261690d5913049355d2064d9d4ef33b0170543c538cab7e40c3e438cef402900b6ef7bd2d7269a3dfb42c18ebb62dadc48c26d3472395c74f0660857c55c79aa07526973de9f6b74cf4d5d360565a9dec79280468955c01e9b170050a4faab466d12a20783357c66f9e83d17e8148db0e1de82081c2b86577141a1e09606526b3d519ffbcc538fbf506fead948d7ab82ea1d2dc2ddde14fddb5ee35d88d378ea536537a9901120973ba6d3149a7f002f267239ff635d232bf983ee5cf695fac7fba02ba16f9528fd816f0e745a51560924795644cbf85980f0ebc563edb3fe82ff6e450c20553910b201b7823bad493fa5b17486f36e959243a7e7e3def96bfbc7dedac1ad30c38884f415e03c556ec2773be2f9eee09bd5f25fb6d6be1c0e9cc6409a8e2643bbc6e9f10cc92ed0f3e1ac1e69d5782242cd4c1aec8719bb7b1460343826a4863fd8e3ab15f3bf1c9d8ef2c13fae5a407c2c7b2c4fa7e71107818befb81146e163e8c41662e85398bcf79132d3f05802b9c2c870771fb86eaffaa8e46c579e4aa6195d3ce71d7de56fcbe49f0e96ac7130b323d6e7f3424e34734cf776ee9f57fd92efda327ec181cad1cd54e2c30ac162e2d494e8cbd1f9698816884d15e3db4a811bf49bb135ff90946f4159d616fcb470f63dbb2ba28b413be8c276ccacfe14b8ca10d6640f03dc942f2e19b7e6438928cbfa695c80738eb78752420613d83ac3cae2ce829bff30c2f6724e6a24d17cc830cfd7bf807c50da977c9aeb24b4ba0c085176b485f0d3569b42c6736d44d45ffdc6a8182688954c880a1142e3cb23e7848d934a702e73528b91733b65cbed07edec67dbe137b9b3a58396d0eea375d95ce00624872ac12e96dfb4f0ec0ec5601717a352287ca973e70d15ab16f240a5058a0f3282833ae8cd1618ee80fabf967f5584bc69f78f771e5e02ed3617f60ff0710cfd58fc2d0c15dd3df0346f7688b9f03ad7797cd837e46f6c760887285ccb11bcd0d05faa5b56989059417a32bbd2bde531c7885acde5ff3d163996ac14d0d11704035e1e2b59069554aab1fbe017bd7e6f4787ee3ff966d7b9c916eac4dfaf1f03cb9092a539c151a56337042457a93fc51886c73c731213bdff5ddefe273f342210d6757543edc166d37e35bae7ddc554687483d2b4d04ee6c896658651b558d3c56fb84afe0c9114a1796d678f7c717243ec1a4b316663206c394471fc03dca4315ffa20ef888d85c18a79782913b6c43095b7977f316ddb3497c5bf6113d0d2331c6e458240d29ddd69cf8cbfe20118fdfd97ab2cf53ccd64b0c3a341954943c9077672385e0c5d2db234613c3028f40e608da8ebddfe84d1a8484aaf2cd88e703674696ab85fb478b249e0dd4231653f705a433fc2e03ea3e7938fe8b9db532737544f6ce485e9976a49dfebc8d4595247d15b12cfe524aca854ebca4a2c4fe10269ab84ec29d27b3bf9cf69b86ae0fd3518a92d76d74580adc81028e36a75b4b91b268dcce83abab3dec53be26ae6bd52026e47caba6e64f8370fcbce31c4583508a2f0de88253a51cf3180cb01d94744274fad4002a4fcec3d285a5dff0d6184bf00bd8fd087f1d8f18531c3c35d10822a91ad8a73a23a7b8681d9afc83cc513ec42da35b4cb2018e7c386193bf75ac868f65fa393b668f141540a533c71377150234c9030a28951c8b18fb9613a7b72bb1c05df2eeb00a39b91513264b01edf8f148890ceda93a7186f52427f010b19aa5b66806376b6b9574f7adc84b3f87a69175958b17129538e02d57d66454aa6ae72ad6fc1cbf18d6a4a40e8c62d557f43e72850c0299413210edbf521a5bcc93a4e1ae1522259a398b4d116894b40a7907f41cdd028cfb3699ade0e25220e1f870115cae311c156c8afa642e66e34cb7d6b74dd1f552050e84ebd4a2d895c46650209d888413c15269ed09fcedd79d9e96110fee575ebf11084d19a23178428b12212d14ddfe5d0d728c475f5d43396077e7f6ee1472070367e6f9ef420b148e69113292c7d6195af4988defcf167131356f2f0b8353fc658d0c07bc5706d41bc9199afb0acebddd3b4b56c5d928a75a39aa48354f0658a1bb4a517f6a545c666fe55e67c0362696679833314b22d696f3cac491e40d0764617317be572b19015861c96162631fcf6cf982eb13f4cc128e6d0a9ccff8e35fe968a79dcc49dd3182fc516d591c1ec5dc02ba48391dc2122a5067aa5dad4a38465f7128bc8cb9aeac04231fc740053334254a9514c69526ee3e5abb47a8c1b26a4787a9c48a61626903b5a01bbfd753ca288e98a1e8bb5e1f9ee23ab037d35d480574b80bc12928316d7e8446613a40139783c0fd7c0af4f3eef0b0bf883b496030b2f6ca32646044f3929dd564f5770023ca1635c65b9ebe77fab4e56df30c720048ab834358e62b09705a5a5217ceea32ebf8926f51c527a116a37b285ed53158888b97e14b507412518359f7bfc0bf5546d54cbb9220941340aa1ac2c5a3cec92bf3a7f8a865fced03fff773211ca507a6dfd2ce401c352264d389f77faae8678f9693cb1f7ed2eb60f94dd9319d74fd8ef29eba41cf790c083f17948da4bb012aab58ebb868c893579e15c943bf2ff428bc6843324a24428f3a325c79e5618cfbafeabf307d50c53b767a607f665779d3e97e1b7f9fd5ee0fb8395df2e7408a7ba8f46d7c6040cdb405604a715eab5a6e086c153a301c4d4b80104297d4edf379d6e1df747a05509c22cdd5f4c643c45e19da17ea3a1792c587efda727a63d4c6a2abf92dacbf5b007fc8a6c05cfa7cfc368221e2eef73bf8c7b81a63201b04d41c71d5fb63e754b6f4a1d835d06179b7e5ced141c3376a0166f660fa26a6b94589e06049fc32c6a50881331cb93b5bb8fb091929ded52bf98753f4d8ae28adc3fde5a7ea0a35d01d6ea247d5bbf63e2d69bf3a2559281b21afffa57bece7c67df847fb21b1b4d773c9753d2af53def3375cd2f82ab328c243bab1c2ea53247b27fe881448babeea3f29d512ce5dfe4780fa3b7d1bfea5b620a6e5ebf69cefe17a0335c4d019b265c68d45723cfeafbd3b5c5b67fa6b1a77712b3ab82b7be1c832a9425c4e735406d12c11576ccf938898e9c760562b95f0be4ca8e875f0dca6e23a43b79533dcd32e147c62e3da2f16d678a66584c4ba196b0b79b0408626e3408f8ab4a135c76bf3f29f35a76b79fc4d2987bc9ee52d705757cdd219500146f8218333186b7c907d6caecd8fa4a70cf7b4f3cff07742c7b8a76743f8fba84063c3f62ff55e8458554da6ac2c3e113a5566d366c11ac4c739997001d06137ecac44b0a8a9a6b799f7aa6bf653a422e9bc9b4da1bb5c5f4828e8b3be0f8bf69e2da6d76957e99368c1caecd39d3acd926854e299e7aad10c22dea1dfb144d6f7a0bdac335a4aa4a54afe4a0fb34665df1b65b742bc70ea46573fc62fcded015a72ca07e1e483908468ddbf76ab2abe7d9eb6dc770e929c57a9f6f3afbd859f5e7734dcdf45627f5d6864449f4dfd8e1b4ed3e23db4e424c856c3e39ae6ec71e9961d407c6981affa7f6fa28faaf63d077a01e32dc6760a7f7d081c1c848693175a5b10df6cf3feffad24a71a365595f2d4999026d48187c51f6b03d663bcf10137b747ce8be6274ab433136d1390bb6ba895e2150f790e00d3e6e3d8adec7b630162b689a536662401571ccd07f7fcb6399958dcec2056ce096dba1e50cf387b77b29fdd64d7b6afd04c1a7f51b547764ecf497556aa993bedf10877c618170d60c2c3833d34acb7f6474bfd8f2537ad83946001d5dc0ccf953545f8de3fae35538b17c26df9f816ddbb026573ace048a755b222a51d55e44f2aa099c9cf95e66c16db2521cd8ccb718f09c20dabcd1058b2b1e8cdeb1890045e404b2c3def082e7498b2477759fb55ac46208996a9ad35f1854ad774092115aa17ddfb9cce6fa0cc6e31a11a7cdbab8e5f88ec281f2bf111cb770b02f4ad3c461d2d0b130c882d1851356aa154b5d98bdde7a092c3c789de2cdc93360f82562df353e33a840bfb234a834ac6d50203631c9b3427e8c88c892f557ec2b6bd7bdf29361d093ee4d7cccc613868c0c43aa82b39b307dc30307b828054b7af6f573780136af9f5bb3a44ef4ec3db02fe7984ad34b5d7526c64442994ae020be64166491c5eb701d3e2344d19a89d76046a013ba9acf1295ad0912cd31ebd4210ff917911f17a3b0dff8ebf0a1c487627bf3bfe3dd497520e3b5eb0b2d002c9afaa135ecb06d4937dddf4f60c337290539e4e5e0381920cfa6dd5c7452331cdb12b2bcc041d9ae12c673dd379de780861fed510c308ba0a6d268d336cd43d6216c2af3e0d0e7b768660cde110e98a506d0170e55b1a993e5b5c0f4606299f79bb79cd26c4d4127c69d4da5a965e33307ef208adae5a2041fe1dde5110f95546420a1f7f9111d73f3323ad688c596db253e222e96f8bb2fc138e77f390f2c02dd03f3e7e8ef6a41903e7784a1e668bf253a26a94a3b42655ae412c59feb7d1ebd6d55d5d4b21213a53df2acdcecb04261d4d6e2341145b7d4b7d4b11393a0f6b8f62141f9c68e57ca11d607e91aad56d126d1a00cac738e089cd390405a4a5745428b7b3c445eb94c2c0fed1edf78cbabfe6e610dde04e7227123e06dbe830323598d4472c433fd7508575a8354f2b48ab7c3d814fb0fde3987229608887246c579c9f7eea829e907683f1b2652a5108e395dc613bb8db9bdf4912b6aefbf21a64cb51bc1198f9915cdfe4c19d8d838acf57bfedb05b8dcfa26b6a15220a6754562919e6994b289fe2ca7c0ff22b6630f1d069986bb921032044ef24639f4e0aeea9ff4ff472983b293bdfad5e425776076c1d262f11ba7b92e20444ed44761e5871a5ce87de382250d19bafa4c58cd3ef49e1e8917309f9c6ecfe703c9181c1a1ec7694405a4340450839bc4991fac396378d4dd2944515ad1c9ff0d3495a34b459fd2d7bb4cce42acebc77c7e0b793ede8c5fc69ab9857f916ea838feff372fc1630027f94f222646b6f47bf695e449c36c47df42d6c8aa7f1a248b6f2814c483cf54f82b9ebfbd31721237cc10d4c1b839acd4371e49cdbc534b48267f3f0b2f6f4a778104c4979c44f2eea219c55b8b319654db395f3ff32a729f4cf4b44a5eb23c3fb5b3caa36e03ed3e3aa12d9532b49dcef534585b67ffde8e43f9d8cf3910e76a6d73fb773fe35f00dedffab0c6f8f5a5a9da0e3873881e5d6fdcc12efd482d1fa319e24406d3c9aa31084e510512f5428a81036302f32ac990a0bceee0ec9830a68a23d1", 0x1000, r4) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) 18:23:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x4b34, 0xffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7fffffff}}, './file0\x00'}) 18:23:13 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:13 executing program 1: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 537.205994][T23852] sp0: Synchronizing with TNC 18:23:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) [ 537.465329][T23864] sp0: Synchronizing with TNC 18:23:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 537.568282][T23869] fuseblk: Bad value for 'fd' 18:23:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 537.639497][T23871] sp0: Synchronizing with TNC 18:23:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x2, 0x0, 0x9, 0x80000000, 0xa, "ee2f4f90af5f161d8626ca292c640e9420adc5"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x0, 0x9, "300984e7903ac621876404c2a31e134b10f30e"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 537.735900][T23877] sp0: Synchronizing with TNC 18:23:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 537.797224][T23879] fuseblk: Bad value for 'fd' 18:23:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:14 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="624629b4f13a27b0c9383e9869113094c28cd9de2c2a2098c40ed84d9cf17647bdde53b56d8ea35369be0a792ff5394edf35c451befba1df3c78d86b", 0x3c, r1) 18:23:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88043, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000100)={0x3f, 0x0, 0x5}) syz_open_dev$ptys(0xc, 0x3, 0x1) 18:23:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 538.069909][T23889] fuseblk: Bad value for 'fd' 18:23:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88043, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000100)={0x3f, 0x0, 0x5}) syz_open_dev$ptys(0xc, 0x3, 0x1) 18:23:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:14 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0a00, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:14 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88043, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000100)={0x3f, 0x0, 0x5}) syz_open_dev$ptys(0xc, 0x3, 0x1) 18:23:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:15 executing program 4: setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x29, @rand_addr=0x64010100, 0x4e24, 0x2, 'sh\x00', 0x1, 0x6, 0x5e}, 0x2c) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$reject(0x13, r2, 0x0, 0x80000001, r1) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:15 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000480)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716f0733cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500", 0x35}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r3, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)="22930f74cfe27f36f1d6dee250ed7d932f1ef2a38d969062631d3ac195629ab95a4aa07baa92be0c524bf73575179c60c568f8e72af43ad89402f850ce582ac31cd58a69c247299031c8248f43686fba18706782cc6985a08ccb6d758db8b9326fd2acb4578b883646286853492adb4cce4d0c90e05367cf21d70d24e004ea2618f3feecb819a082a0ccfe86697f93da0dfdac89d5d100866b2f6025ab98138b3bc44ee16d3176ecf28fd5b3910f850626ae41465f153afb2ad04bcfde648829cf2c02a9ad2a2bfde5efb63bac6899d0d730251591040f", 0xd7, r4) r6 = add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "756f89a0a0df06fa8ac3017d369c06342f988a77776656bb71ce744b428191dae5712232969cd7d86af41dfbb1cb9ca8cece554c045d6267933ea918d737ff4c", 0x24}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffd, r6, 0x8db9c8175941e6ce) keyctl$setperm(0x5, r4, 0x0) request_key(&(0x7f0000000240)='id_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='key_or_keyring:', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000080)=@keyring={'key_or_keyring:', r4}) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 539.209373][T23921] sp0: Synchronizing with TNC 18:23:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x2, 0x99, "e06c5800865e05f94806023d07f3e3824034e1f00a055cfc968063f34278e1f331b4ed96c4e2d54e4a6562ef4b44422d96ea703b854336530bba00c4f3dd05ec2a83a0afb6a840b6cfe7056a884f79c7f82deabc820d094190ad10c8a3b5a1b3ac87ff70afc78f92243a9710f49adf9d8b0331c0302962a031349cf63a3922955d19bf662530c172d752c5c2aa7f34a36913733bec4f1ce027"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x6) 18:23:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r2, 0x0) keyctl$negate(0xd, r2, 0x0, r1) 18:23:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:15 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r2, 0x1) 18:23:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x2, 0x99, "e06c5800865e05f94806023d07f3e3824034e1f00a055cfc968063f34278e1f331b4ed96c4e2d54e4a6562ef4b44422d96ea703b854336530bba00c4f3dd05ec2a83a0afb6a840b6cfe7056a884f79c7f82deabc820d094190ad10c8a3b5a1b3ac87ff70afc78f92243a9710f49adf9d8b0331c0302962a031349cf63a3922955d19bf662530c172d752c5c2aa7f34a36913733bec4f1ce027"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 539.512621][T23936] sp0: Synchronizing with TNC 18:23:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000180)={0x2, 0x99, "e06c5800865e05f94806023d07f3e3824034e1f00a055cfc968063f34278e1f331b4ed96c4e2d54e4a6562ef4b44422d96ea703b854336530bba00c4f3dd05ec2a83a0afb6a840b6cfe7056a884f79c7f82deabc820d094190ad10c8a3b5a1b3ac87ff70afc78f92243a9710f49adf9d8b0331c0302962a031349cf63a3922955d19bf662530c172d752c5c2aa7f34a36913733bec4f1ce027"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r2, 0x1) 18:23:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0x2, 0x15, 0x5, 0x0, 0x7}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) 18:23:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)) r2 = memfd_secret(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)={0xa3, 0x40000000, 0x2, "3279432a1df952e9b31f1845450af50697c778a5ddb04711cdf3e0e5ff6141e80f49c7bf2634f9185aa14f85d6ca3632d6b343326442230f6f6724280719380871d10e08edce8971bf49174ec4940d305d80eb35ed8b7ef45161c7eb3603f537393498505ac887f8185899785f62bf3537c6fb370e81b0192239db354b8c96aa2d092e63085889efe8a023b8ee26e5be9463df64ef3ea4a4a7308373c9243c5fdc3be9"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="570000000600000031800000810042e70959ddfc991c95977ef7000000da16b8106dc0fe1fa8bd8db8b15fdb504ec45f0db09b68d73ea7dce707fb197a28fa742161cb5b3a4a9a276fd7991645631c9ba20361681d589e10ac1f2d5e73e80a74044264b7d32e78a654cc2616e6bbf1264fe2fe5555b3c32f7130bd52ec9a8fc59e24689ff05df453fd5e86e3f38e4d87e39a0906530680e68b48e37b4ea1a821d70fd7fb61ce07b02e54bb3626d88a87ac8bd0a9d3ebe97b017fa53996216255b4e089b56642e781f2ab7e11289827817b207d38dd0871b23b38ca6971c6d5cd10b82b102bc6abf586ee7ade4271de687b73824311e181fd4ef58a0547c1dcf83be901febee5d401bbbedd39595f9d08905bd0d9230fe56367df8d522a44aee1f25181e1ce7c21b2b3f2cd146c3857d011df4d10057b7940865617a221ee9947f6b0b9d6af9b7e79b58055b0907f864c864a49fd41f5eb"]) 18:23:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)) r2 = memfd_secret(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)={0xa3, 0x40000000, 0x2, "3279432a1df952e9b31f1845450af50697c778a5ddb04711cdf3e0e5ff6141e80f49c7bf2634f9185aa14f85d6ca3632d6b343326442230f6f6724280719380871d10e08edce8971bf49174ec4940d305d80eb35ed8b7ef45161c7eb3603f537393498505ac887f8185899785f62bf3537c6fb370e81b0192239db354b8c96aa2d092e63085889efe8a023b8ee26e5be9463df64ef3ea4a4a7308373c9243c5fdc3be9"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="570000000600000031800000810042e70959ddfc991c95977ef7000000da16b8106dc0fe1fa8bd8db8b15fdb504ec45f0db09b68d73ea7dce707fb197a28fa742161cb5b3a4a9a276fd7991645631c9ba20361681d589e10ac1f2d5e73e80a74044264b7d32e78a654cc2616e6bbf1264fe2fe5555b3c32f7130bd52ec9a8fc59e24689ff05df453fd5e86e3f38e4d87e39a0906530680e68b48e37b4ea1a821d70fd7fb61ce07b02e54bb3626d88a87ac8bd0a9d3ebe97b017fa53996216255b4e089b56642e781f2ab7e11289827817b207d38dd0871b23b38ca6971c6d5cd10b82b102bc6abf586ee7ade4271de687b73824311e181fd4ef58a0547c1dcf83be901febee5d401bbbedd39595f9d08905bd0d9230fe56367df8d522a44aee1f25181e1ce7c21b2b3f2cd146c3857d011df4d10057b7940865617a221ee9947f6b0b9d6af9b7e79b58055b0907f864c864a49fd41f5eb"]) 18:23:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x6c000000) [ 540.422359][T23969] sp0: Synchronizing with TNC 18:23:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:16 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffb, r0, 0x1) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='-^\x00', r2) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)) r2 = memfd_secret(0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)={0xa3, 0x40000000, 0x2, "3279432a1df952e9b31f1845450af50697c778a5ddb04711cdf3e0e5ff6141e80f49c7bf2634f9185aa14f85d6ca3632d6b343326442230f6f6724280719380871d10e08edce8971bf49174ec4940d305d80eb35ed8b7ef45161c7eb3603f537393498505ac887f8185899785f62bf3537c6fb370e81b0192239db354b8c96aa2d092e63085889efe8a023b8ee26e5be9463df64ef3ea4a4a7308373c9243c5fdc3be9"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) [ 540.615968][T23976] sp0: Synchronizing with TNC 18:23:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1d000000) 18:23:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7000000) 18:23:17 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3f00) 18:23:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3f00) 18:23:17 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) [ 541.388318][T23997] sp0: Synchronizing with TNC [ 541.405724][T23996] sp2: Synchronizing with TNC [ 541.413566][T24001] sp1: Synchronizing with TNC 18:23:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:17 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3f00) 18:23:17 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$reject(0x13, r0, 0x9e77, 0x9, r2) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='big_key\x00', 0xfffffffffffffffa) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:17 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000000)='*$(\n\'{((\v\x00\xd3\xb4\xda&\xe7\x03C\x89\x80\xba\xc3/#@\xf2\t\xf3\x80=\x02\xe21z\xad\xc1\xd3\xbf\xd51N\xa2\xb9\x89\xc9\x05\xb3x{v\x83 U~>\xa3j\xb9}\x03\x00\x00\x00\x00\x00\x00\x00\xcb\xe0\x1c\x1c\x8bAx(\xd3\xf5\xca\t\xf6\xa5\x96\xe9\xdbB\x7f', 0xfffffffffffffffc) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "33ce9cd62ca7d5ded205c44c78d8e6c4426d716fae33cd2183b1831bb555212432d4e0d0f53109223931f7ee0dd474517e97dfa500"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x0) request_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000300)='$^,/[\x00', r1) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "b3e0130bd5e156546af93d7d3b1689d55d9c0e771940d987ca54fdaf319793982e82e56b3a48ff0fa4ae2124f7e93b4c36c466fc6997410f2e147269d32c7728", 0x1b}, 0x48, r0) add_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="f2573f79c7fb1fbbe6615185", 0xc, r2) 18:23:18 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x700) 18:23:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x108) [ 542.306733][T24026] fuseblk: Bad value for 'fd' 18:23:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x108) 18:23:18 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 542.364956][T24030] sp0: Synchronizing with TNC 18:23:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:18 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x108) 18:23:18 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 542.532849][T24040] fuseblk: Bad value for 'fd' 18:23:19 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:19 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x10) 18:23:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 543.224535][T24054] fuseblk: Bad value for 'fd' 18:23:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) 18:23:19 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) [ 543.294766][T24057] sp0: Synchronizing with TNC 18:23:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:19 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 543.422950][T24068] sp1: Synchronizing with TNC [ 543.444819][T24071] fuseblk: Invalid rootmode 18:23:19 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:19 executing program 3: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 543.632119][T24080] fuseblk: Invalid rootmode 18:23:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:19 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:19 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}, {@default_permissions}]}}) 18:23:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x4020940d, &(0x7f0000000040)) 18:23:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 543.782313][T24096] fuseblk: Invalid rootmode 18:23:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {}]}}) 18:23:20 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 543.931398][T24106] sp0: Synchronizing with TNC 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x8933, &(0x7f0000000040)) 18:23:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000040)) 18:23:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x0e', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:20 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 544.152806][T24127] sp0: Synchronizing with TNC 18:23:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000040)) 18:23:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:20 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x03', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x5441, &(0x7f0000000040)) 18:23:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x68}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:20 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x4c}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 544.481879][T24151] sp0: Synchronizing with TNC 18:23:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x18}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 5: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x11}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x10}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:20 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:20 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3, 0x7}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) [ 544.757352][T24175] sp0: Synchronizing with TNC 18:23:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000040)) 18:23:20 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='*$(!\'{((\v\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r0) 18:23:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:23:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000040)) 18:23:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:21 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 1) 18:23:21 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 545.057963][T24194] sp0: Synchronizing with TNC [ 545.091662][T24200] FAULT_INJECTION: forcing a failure. [ 545.091662][T24200] name failslab, interval 1, probability 0, space 0, times 0 [ 545.108497][T24200] CPU: 0 PID: 24200 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller #0 [ 545.117388][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.127551][T24200] Call Trace: [ 545.130849][T24200] [ 545.133795][T24200] dump_stack_lvl+0x201/0x2d8 18:23:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, 0x0) [ 545.138506][T24200] ? show_regs_print_info+0x12/0x12 [ 545.143727][T24200] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 545.149474][T24200] ? __might_sleep+0xe0/0xe0 [ 545.154155][T24200] should_fail+0x384/0x4b0 [ 545.158653][T24200] ? strndup_user+0x64/0xc0 [ 545.163174][T24200] should_failslab+0x5/0x20 [ 545.167951][T24200] __kmalloc_track_caller+0x92/0x370 [ 545.173269][T24200] memdup_user+0x22/0xb0 [ 545.177532][T24200] strndup_user+0x64/0xc0 [ 545.181884][T24200] __se_sys_mount+0x9a/0x3c0 [ 545.186491][T24200] ? print_irqtrace_events+0x220/0x220 [ 545.192106][T24200] ? vtime_user_exit+0x2b2/0x3e0 [ 545.197082][T24200] ? __x64_sys_mount+0xc0/0xc0 [ 545.201829][T24200] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 545.207802][T24200] ? lockdep_hardirqs_on+0x95/0x140 [ 545.212988][T24200] ? __x64_sys_mount+0x1c/0xc0 [ 545.217745][T24200] do_syscall_64+0x44/0xd0 [ 545.222156][T24200] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 545.228037][T24200] RIP: 0033:0x7f861f8b2059 [ 545.232460][T24200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 545.252056][T24200] RSP: 002b:00007f861e227168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.260466][T24200] RAX: ffffffffffffffda RBX: 00007f861f9c4f60 RCX: 00007f861f8b2059 [ 545.268430][T24200] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 545.276398][T24200] RBP: 00007f861e2271d0 R08: 00000000200001c0 R09: 0000000000000000 [ 545.284373][T24200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 18:23:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r0, 0x2, &(0x7f0000000040)) [ 545.292337][T24200] R13: 00007fffc731a99f R14: 00007f861e227300 R15: 0000000000022000 [ 545.300312][T24200] [ 545.319450][T24206] fuseblk: Bad value for 'fd' 18:23:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 545.341039][T24209] fuseblk: Bad value for 'fd' 18:23:21 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (fail_nth: 1) 18:23:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 545.369134][T24208] sp0: Synchronizing with TNC 18:23:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, 0x0) 18:23:21 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 545.449361][T24216] fuseblk: Bad value for 'fd' [ 545.453882][T24217] fuseblk: Bad value for 'fd' 18:23:21 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 2) 18:23:21 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 545.583926][T24222] sp0: Synchronizing with TNC [ 545.588655][T24223] fuseblk: Bad value for 'fd' 18:23:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, 0x0) 18:23:21 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 545.667417][T24228] fuseblk: Bad value for 'fd' 18:23:21 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 545.695872][T24231] FAULT_INJECTION: forcing a failure. [ 545.695872][T24231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.763131][T24233] sp0: Synchronizing with TNC [ 545.772024][T24231] CPU: 0 PID: 24231 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller #0 [ 545.780820][T24231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.790887][T24231] Call Trace: [ 545.794158][T24231] [ 545.797072][T24231] dump_stack_lvl+0x201/0x2d8 [ 545.801743][T24231] ? show_regs_print_info+0x12/0x12 [ 545.806942][T24231] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 545.812672][T24231] ? __might_fault+0xb6/0x110 [ 545.817342][T24231] ? rcu_read_lock_sched_held+0x89/0x130 [ 545.823230][T24231] should_fail+0x384/0x4b0 [ 545.827655][T24231] _copy_from_user+0x2d/0x170 [ 545.832405][T24231] memdup_user+0x5b/0xb0 [ 545.836636][T24231] strndup_user+0x64/0xc0 [ 545.840956][T24231] __se_sys_mount+0x9a/0x3c0 [ 545.845531][T24231] ? print_irqtrace_events+0x220/0x220 [ 545.850973][T24231] ? vtime_user_exit+0x2b2/0x3e0 [ 545.855918][T24231] ? __x64_sys_mount+0xc0/0xc0 [ 545.860690][T24231] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 545.866659][T24231] ? lockdep_hardirqs_on+0x95/0x140 [ 545.871957][T24231] ? __x64_sys_mount+0x1c/0xc0 [ 545.876796][T24231] do_syscall_64+0x44/0xd0 [ 545.881208][T24231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 545.887107][T24231] RIP: 0033:0x7f861f8b2059 [ 545.891534][T24231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:23:22 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 545.911398][T24231] RSP: 002b:00007f861e227168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 545.919811][T24231] RAX: ffffffffffffffda RBX: 00007f861f9c4f60 RCX: 00007f861f8b2059 [ 545.927786][T24231] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 545.935755][T24231] RBP: 00007f861e2271d0 R08: 00000000200001c0 R09: 0000000000000000 [ 545.943732][T24231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.951699][T24231] R13: 00007fffc731a99f R14: 00007f861e227300 R15: 0000000000022000 [ 545.959677][T24231] 18:23:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:22 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:22 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 3) 18:23:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 18:23:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:22 executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 546.281440][T24257] sp0: Synchronizing with TNC [ 546.304168][T24260] FAULT_INJECTION: forcing a failure. [ 546.304168][T24260] name failslab, interval 1, probability 0, space 0, times 0 [ 546.318028][T24260] CPU: 0 PID: 24260 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller #0 [ 546.326815][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 546.336880][T24260] Call Trace: [ 546.340164][T24260] [ 546.343084][T24260] dump_stack_lvl+0x201/0x2d8 [ 546.347754][T24260] ? show_regs_print_info+0x12/0x12 [ 546.352945][T24260] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 546.358659][T24260] ? __might_sleep+0xe0/0xe0 [ 546.363239][T24260] ? __might_fault+0xb6/0x110 [ 546.367905][T24260] ? rcu_read_lock_sched_held+0x89/0x130 [ 546.373530][T24260] should_fail+0x384/0x4b0 [ 546.377937][T24260] ? strndup_user+0x64/0xc0 [ 546.382607][T24260] should_failslab+0x5/0x20 [ 546.387095][T24260] __kmalloc_track_caller+0x92/0x370 [ 546.392374][T24260] memdup_user+0x22/0xb0 [ 546.396608][T24260] strndup_user+0x64/0xc0 [ 546.400920][T24260] __se_sys_mount+0xdd/0x3c0 [ 546.405497][T24260] ? print_irqtrace_events+0x220/0x220 [ 546.410948][T24260] ? vtime_user_exit+0x2b2/0x3e0 [ 546.415876][T24260] ? __x64_sys_mount+0xc0/0xc0 [ 546.420625][T24260] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 546.426600][T24260] ? lockdep_hardirqs_on+0x95/0x140 [ 546.431800][T24260] ? __x64_sys_mount+0x1c/0xc0 [ 546.436552][T24260] do_syscall_64+0x44/0xd0 [ 546.440959][T24260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 546.446846][T24260] RIP: 0033:0x7f861f8b2059 [ 546.451259][T24260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 546.470875][T24260] RSP: 002b:00007f861e227168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 546.479278][T24260] RAX: ffffffffffffffda RBX: 00007f861f9c4f60 RCX: 00007f861f8b2059 [ 546.487233][T24260] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 546.495191][T24260] RBP: 00007f861e2271d0 R08: 00000000200001c0 R09: 0000000000000000 18:23:22 executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:22 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 546.503171][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.511129][T24260] R13: 00007fffc731a99f R14: 00007f861e227300 R15: 0000000000022000 [ 546.519104][T24260] 18:23:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 18:23:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x7}, 0x14}}, 0x0) 18:23:22 executing program 4: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 546.770687][T24269] sp0: Synchronizing with TNC 18:23:23 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 4) 18:23:23 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:23 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x700}, 0x14}}, 0x0) 18:23:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) 18:23:23 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 547.333498][T24283] fuseblk: Bad value for 'fd' 18:23:23 executing program 0: syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x7000000}, 0x14}}, 0x0) [ 547.353992][T24284] sp0: Synchronizing with TNC 18:23:23 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 547.587048][T24296] fuseblk: Bad value for 'fd' [ 547.697755][T24293] FAULT_INJECTION: forcing a failure. [ 547.697755][T24293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.714606][T24293] CPU: 0 PID: 24293 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller #0 [ 547.723400][T24293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 547.733471][T24293] Call Trace: [ 547.736786][T24293] [ 547.739733][T24293] dump_stack_lvl+0x201/0x2d8 [ 547.744450][T24293] ? show_regs_print_info+0x12/0x12 [ 547.749673][T24293] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 547.755507][T24293] ? __might_fault+0xb6/0x110 [ 547.760214][T24293] ? rcu_read_lock_sched_held+0x89/0x130 [ 547.765879][T24293] should_fail+0x384/0x4b0 [ 547.770334][T24293] _copy_from_user+0x2d/0x170 [ 547.775052][T24293] memdup_user+0x5b/0xb0 [ 547.779320][T24293] strndup_user+0x64/0xc0 [ 547.783673][T24293] __se_sys_mount+0xdd/0x3c0 [ 547.788288][T24293] ? print_irqtrace_events+0x220/0x220 [ 547.793896][T24293] ? vtime_user_exit+0x2b2/0x3e0 [ 547.798899][T24293] ? __x64_sys_mount+0xc0/0xc0 [ 547.803681][T24293] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 547.809725][T24293] ? lockdep_hardirqs_on+0x95/0x140 [ 547.814945][T24293] ? __x64_sys_mount+0x1c/0xc0 [ 547.819835][T24293] do_syscall_64+0x44/0xd0 [ 547.824332][T24293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 547.830219][T24293] RIP: 0033:0x7f861f8b2059 [ 547.834629][T24293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 547.854229][T24293] RSP: 002b:00007f861e1e5168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.862673][T24293] RAX: ffffffffffffffda RBX: 00007f861f9c5100 RCX: 00007f861f8b2059 [ 547.870824][T24293] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 547.878792][T24293] RBP: 00007f861e1e51d0 R08: 00000000200001c0 R09: 0000000000000000 [ 547.886751][T24293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.894713][T24293] R13: 00007fffc731a99f R14: 00007f861e1e5300 R15: 0000000000022000 [ 547.902685][T24293] 18:23:24 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:24 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 548.339177][T24304] fuseblk: Bad value for 'fd' 18:23:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x7}, 0x14}}, 0x0) 18:23:24 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:24 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x700}, 0x14}}, 0x0) [ 548.538075][T24312] fuseblk: Bad value for 'fd' [ 548.549313][T24313] fuseblk: Bad value for 'fd' 18:23:24 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:24 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:24 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 548.739547][T24321] fuseblk: Bad value for 'fd' 18:23:25 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x7000000}, 0x14}}, 0x0) 18:23:25 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:25 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:25 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:25 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x0, {0x1, 0x7}}, 0x14}}, 0x0) 18:23:25 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:26 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}}, 0x0) 18:23:26 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:26 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:26 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x700}}, 0x14}}, 0x0) 18:23:26 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x7}, 0x0) 18:23:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:27 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x700}, 0x0) 18:23:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x7000000}, 0x0) 18:23:27 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x700000000000000}, 0x0) 18:23:27 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:28 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 18:23:28 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:28 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:28 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 552.289197][T24418] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 552.298585][T24418] CPU: 1 PID: 24418 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller #0 [ 552.307435][T24418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 552.317500][T24418] Call Trace: [ 552.320796][T24418] [ 552.323714][T24418] dump_stack_lvl+0x201/0x2d8 [ 552.328384][T24418] ? show_regs_print_info+0x12/0x12 [ 552.333684][T24418] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 552.339409][T24418] sysfs_create_dir_ns+0x2c4/0x390 [ 552.344579][T24418] ? sysfs_warn_dup+0xa0/0xa0 [ 552.349243][T24418] ? do_raw_spin_unlock+0x134/0x8a0 [ 552.354439][T24418] kobject_add_internal+0x418/0xb50 [ 552.359641][T24418] kobject_add+0x14c/0x210 [ 552.364049][T24418] ? kobject_init+0x1d0/0x1d0 [ 552.368721][T24418] ? get_device_parent+0x2cd/0x430 [ 552.373894][T24418] device_add+0x523/0x16d0 [ 552.378317][T24418] ? virtual_device_parent+0x50/0x50 [ 552.383605][T24418] ? memcpy+0x3c/0x60 [ 552.387596][T24418] device_create+0x252/0x2e0 [ 552.392194][T24418] ? vsnprintf+0x18e/0x1d40 [ 552.396685][T24418] ? root_device_unregister+0x100/0x100 [ 552.402224][T24418] ? __percpu_counter_init+0x1fd/0x230 [ 552.407671][T24418] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 552.414041][T24418] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 552.420396][T24418] bdi_register_va+0x86/0x530 [ 552.425065][T24418] super_setup_bdi_name+0xe0/0x1f0 [ 552.430165][T24418] ? __lock_acquire+0x2b00/0x2b00 [ 552.435188][T24418] ? vfs_get_tree+0x270/0x270 [ 552.439857][T24418] ? do_raw_spin_unlock+0x134/0x8a0 [ 552.445048][T24418] fuse_fill_super_common+0x6e1/0x11a0 [ 552.450555][T24418] ? fuse_init_fs_context_submount+0x40/0x40 [ 552.456524][T24418] ? lockdep_hardirqs_on+0x95/0x140 [ 552.461715][T24418] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 552.467870][T24418] ? pointer+0xac/0xb00 [ 552.472017][T24418] fuse_fill_super+0x170/0x1e0 [ 552.476778][T24418] get_tree_bdev+0x406/0x630 [ 552.481359][T24418] ? fuse_reconfigure+0xb0/0xb0 [ 552.486202][T24418] fuse_get_tree+0x31c/0x4a0 [ 552.490789][T24418] vfs_get_tree+0x86/0x270 [ 552.495198][T24418] path_mount+0x1986/0x2c30 [ 552.499695][T24418] ? slab_free_freelist_hook+0x12e/0x1a0 [ 552.505324][T24418] ? mark_mounts_for_expiry+0x520/0x520 [ 552.510863][T24418] ? user_path_at_empty+0x149/0x1a0 [ 552.516052][T24418] ? kmem_cache_free+0xb6/0x1c0 [ 552.520895][T24418] ? user_path_at_empty+0x149/0x1a0 [ 552.526094][T24418] __se_sys_mount+0x308/0x3c0 [ 552.530770][T24418] ? vtime_user_exit+0x2b2/0x3e0 [ 552.535701][T24418] ? __x64_sys_mount+0xc0/0xc0 [ 552.540476][T24418] ? lockdep_hardirqs_on+0x95/0x140 [ 552.545665][T24418] ? __x64_sys_mount+0x1c/0xc0 [ 552.550416][T24418] do_syscall_64+0x44/0xd0 [ 552.554828][T24418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 552.560707][T24418] RIP: 0033:0x7f6ef6e05059 [ 552.565132][T24418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 552.584728][T24418] RSP: 002b:00007f6ef577a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 552.593141][T24418] RAX: ffffffffffffffda RBX: 00007f6ef6f17f60 RCX: 00007f6ef6e05059 [ 552.601115][T24418] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 552.609081][T24418] RBP: 00007f6ef6e5f08d R08: 00000000200001c0 R09: 0000000000000000 [ 552.617043][T24418] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 552.625004][T24418] R13: 00007ffdc662960f R14: 00007f6ef577a300 R15: 0000000000022000 [ 552.632985][T24418] 18:23:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x7}, 0x0) [ 552.644095][T24418] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:28 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x700}, 0x0) 18:23:29 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x7000000}, 0x0) 18:23:29 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x700000000000000}, 0x0) 18:23:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:29 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 18:23:29 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:29 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:29 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 553.928465][T24470] fuseblk: Bad value for 'fd' 18:23:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:30 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 553.965606][T24472] fuseblk: Bad value for 'fd' 18:23:30 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:30 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 554.188977][T24482] fuseblk: Bad value for 'fd' [ 554.201298][T24483] fuseblk: Bad value for 'fd' 18:23:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:30 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:30 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x700}, 0x0) 18:23:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x700000000000000}, 0x0) [ 554.775660][T24493] fuseblk: Bad value for 'fd' 18:23:30 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 554.808935][T24496] fuseblk: Bad value for 'fd' 18:23:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}}) 18:23:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:23:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 554.966494][T24505] fuseblk: Invalid rootmode 18:23:31 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 555.019726][T24508] fuseblk: Invalid rootmode 18:23:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x7) 18:23:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}}) 18:23:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:31 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 18:23:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x700) [ 555.612191][T24518] fuseblk: Invalid rootmode [ 555.618346][T24520] fuseblk: Invalid rootmode 18:23:31 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}}) 18:23:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x25, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:31 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:31 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x48, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 555.866975][T24534] fuseblk: Invalid rootmode [ 555.885411][T24536] fuseblk: Invalid rootmode 18:23:32 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) syz_open_pts(r0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) 18:23:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x7000000) 18:23:32 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) 18:23:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 556.439869][T24547] loop0: Can't mount, would change RO state 18:23:32 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x700000000000000) 18:23:32 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x64, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 556.711592][T24559] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 556.737594][T24559] CPU: 0 PID: 24559 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 556.746438][T24559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.756655][T24559] Call Trace: [ 556.759943][T24559] [ 556.762864][T24559] dump_stack_lvl+0x201/0x2d8 [ 556.767544][T24559] ? show_regs_print_info+0x12/0x12 [ 556.772731][T24559] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 556.778450][T24559] sysfs_create_dir_ns+0x2c4/0x390 [ 556.783579][T24559] ? sysfs_warn_dup+0xa0/0xa0 [ 556.788246][T24559] ? do_raw_spin_unlock+0x134/0x8a0 [ 556.793448][T24559] kobject_add_internal+0x418/0xb50 [ 556.798644][T24559] kobject_add+0x14c/0x210 [ 556.803051][T24559] ? kobject_init+0x1d0/0x1d0 [ 556.807816][T24559] ? get_device_parent+0x2cd/0x430 [ 556.812917][T24559] device_add+0x523/0x16d0 [ 556.817334][T24559] ? virtual_device_parent+0x50/0x50 [ 556.822617][T24559] ? memcpy+0x3c/0x60 [ 556.826650][T24559] device_create+0x252/0x2e0 [ 556.831277][T24559] ? vsnprintf+0x18e/0x1d40 [ 556.835776][T24559] ? root_device_unregister+0x100/0x100 [ 556.841326][T24559] ? __percpu_counter_init+0x1fd/0x230 [ 556.846794][T24559] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 556.853207][T24559] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 556.859532][T24559] bdi_register_va+0x86/0x530 [ 556.864206][T24559] super_setup_bdi_name+0xe0/0x1f0 [ 556.869313][T24559] ? __lock_acquire+0x2b00/0x2b00 [ 556.874342][T24559] ? vfs_get_tree+0x270/0x270 [ 556.879007][T24559] ? do_raw_spin_unlock+0x134/0x8a0 [ 556.884435][T24559] fuse_fill_super_common+0x6e1/0x11a0 [ 556.889917][T24559] ? fuse_init_fs_context_submount+0x40/0x40 [ 556.895890][T24559] ? snprintf+0xd6/0x120 [ 556.900128][T24559] ? vscnprintf+0x80/0x80 [ 556.904448][T24559] ? set_blocksize+0x1d5/0x360 [ 556.909272][T24559] fuse_fill_super+0x170/0x1e0 [ 556.914032][T24559] get_tree_bdev+0x406/0x630 [ 556.918608][T24559] ? fuse_reconfigure+0xb0/0xb0 [ 556.923448][T24559] fuse_get_tree+0x31c/0x4a0 [ 556.928029][T24559] vfs_get_tree+0x86/0x270 [ 556.932431][T24559] path_mount+0x1986/0x2c30 [ 556.936933][T24559] ? slab_free_freelist_hook+0x12e/0x1a0 [ 556.942571][T24559] ? mark_mounts_for_expiry+0x520/0x520 [ 556.948110][T24559] ? user_path_at_empty+0x149/0x1a0 [ 556.953306][T24559] ? kmem_cache_free+0xb6/0x1c0 [ 556.958159][T24559] ? user_path_at_empty+0x149/0x1a0 [ 556.963346][T24559] __se_sys_mount+0x308/0x3c0 [ 556.968010][T24559] ? vtime_user_exit+0x2b2/0x3e0 [ 556.972935][T24559] ? __x64_sys_mount+0xc0/0xc0 [ 556.977685][T24559] ? lockdep_hardirqs_on+0x95/0x140 [ 556.982869][T24559] ? __x64_sys_mount+0x1c/0xc0 [ 556.987640][T24559] do_syscall_64+0x44/0xd0 [ 556.992058][T24559] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 556.997934][T24559] RIP: 0033:0x7fd07601f059 [ 557.002339][T24559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 557.022036][T24559] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 557.030441][T24559] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 557.038395][T24559] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 557.046358][T24559] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 [ 557.054322][T24559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.062280][T24559] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 557.070262][T24559] [ 557.104718][T24559] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0xffffffff00000000) 18:23:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:33 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:33 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:33 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:33 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14d059007a2667f41ab6211fe463c65b2e902da3294dde24c741b6ccc8ab6366a4aef66ac0a7d3335a28902113e0b204d605721fc5e54eff17d14cfe4f9c7514aaadb105ad1bfc64bc60a84ef2883815a924f8a91717db65d70399878c4d98c35a8c4e76b887ff8e94fd516e94ac73a2444558c540640f487a67fb939c559d0a9d00"/148, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:23:33 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 557.473683][T24570] fuseblk: Bad value for 'fd' 18:23:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14d059007a2667f41ab6211fe463c65b2e902da3294dde24c741b6ccc8ab6366a4aef66ac0a7d3335a28902113e0b204d605721fc5e54eff17d14cfe4f9c7514aaadb105ad1bfc64bc60a84ef2883815a924f8a91717db65d70399878c4d98c35a8c4e76b887ff8e94fd516e94ac73a2444558c540640f487a67fb939c559d0a9d00"/148, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:23:33 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14d059007a2667f41ab6211fe463c65b2e902da3294dde24c741b6ccc8ab6366a4aef66ac0a7d3335a28902113e0b204d605721fc5e54eff17d14cfe4f9c7514aaadb105ad1bfc64bc60a84ef2883815a924f8a91717db65d70399878c4d98c35a8c4e76b887ff8e94fd516e94ac73a2444558c540640f487a67fb939c559d0a9d00"/148, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:23:34 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 1) 18:23:34 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10284840}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:34 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 1) 18:23:34 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 558.195371][T24599] FAULT_INJECTION: forcing a failure. [ 558.195371][T24599] name failslab, interval 1, probability 0, space 0, times 0 [ 558.268575][T24599] CPU: 0 PID: 24599 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 558.277379][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.287540][T24599] Call Trace: [ 558.290833][T24599] [ 558.293772][T24599] dump_stack_lvl+0x201/0x2d8 [ 558.298474][T24599] ? show_regs_print_info+0x12/0x12 [ 558.303692][T24599] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 558.309444][T24599] ? __might_sleep+0xe0/0xe0 [ 558.314057][T24599] should_fail+0x384/0x4b0 [ 558.318500][T24599] ? strndup_user+0x64/0xc0 [ 558.323030][T24599] should_failslab+0x5/0x20 [ 558.327543][T24599] __kmalloc_track_caller+0x92/0x370 [ 558.332848][T24599] memdup_user+0x22/0xb0 [ 558.337112][T24599] strndup_user+0x64/0xc0 [ 558.339593][T24605] FAULT_INJECTION: forcing a failure. [ 558.339593][T24605] name failslab, interval 1, probability 0, space 0, times 0 [ 558.341467][T24599] __se_sys_mount+0x9a/0x3c0 [ 558.341495][T24599] ? print_irqtrace_events+0x220/0x220 [ 558.341515][T24599] ? vtime_user_exit+0x2b2/0x3e0 [ 558.341535][T24599] ? __x64_sys_mount+0xc0/0xc0 [ 558.373819][T24599] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 558.379821][T24599] ? lockdep_hardirqs_on+0x95/0x140 [ 558.385033][T24599] ? __x64_sys_mount+0x1c/0xc0 [ 558.389814][T24599] do_syscall_64+0x44/0xd0 [ 558.394369][T24599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.400293][T24599] RIP: 0033:0x7fd07601f059 [ 558.404720][T24599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 558.424340][T24599] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 558.432857][T24599] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 558.440844][T24599] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 558.448829][T24599] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 558.456811][T24599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.464789][T24599] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 558.472791][T24599] [ 558.476726][T24605] CPU: 1 PID: 24605 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 558.485519][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.495735][T24605] Call Trace: [ 558.499024][T24605] [ 558.501955][T24605] dump_stack_lvl+0x201/0x2d8 [ 558.506656][T24605] ? show_regs_print_info+0x12/0x12 [ 558.511851][T24605] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 558.517575][T24605] ? __might_sleep+0xe0/0xe0 [ 558.522170][T24605] should_fail+0x384/0x4b0 [ 558.526585][T24605] ? strndup_user+0x64/0xc0 [ 558.531080][T24605] should_failslab+0x5/0x20 [ 558.535576][T24605] __kmalloc_track_caller+0x92/0x370 [ 558.540967][T24605] memdup_user+0x22/0xb0 [ 558.545199][T24605] strndup_user+0x64/0xc0 [ 558.549529][T24605] __se_sys_mount+0x9a/0x3c0 [ 558.554118][T24605] ? print_irqtrace_events+0x220/0x220 [ 558.559662][T24605] ? vtime_user_exit+0x2b2/0x3e0 [ 558.564600][T24605] ? __x64_sys_mount+0xc0/0xc0 [ 558.569354][T24605] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 558.575338][T24605] ? lockdep_hardirqs_on+0x95/0x140 [ 558.580670][T24605] ? __x64_sys_mount+0x1c/0xc0 [ 558.585527][T24605] do_syscall_64+0x44/0xd0 [ 558.589993][T24605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.595909][T24605] RIP: 0033:0x7fe68358f059 [ 558.600318][T24605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:23:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (fail_nth: 1) [ 558.619918][T24605] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 558.628345][T24605] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 558.636401][T24605] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 558.644450][T24605] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 558.652508][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.660472][T24605] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 558.668448][T24605] 18:23:34 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 2) 18:23:34 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 558.871848][T24613] sp0: Synchronizing with TNC [ 558.908179][T24613] FAULT_INJECTION: forcing a failure. [ 558.908179][T24613] name failslab, interval 1, probability 0, space 0, times 0 [ 558.977137][T24613] CPU: 0 PID: 24613 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller #0 [ 558.985947][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.996019][T24613] Call Trace: [ 558.999310][T24613] [ 559.002252][T24613] dump_stack_lvl+0x201/0x2d8 [ 559.006956][T24613] ? show_regs_print_info+0x12/0x12 [ 559.012170][T24613] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 559.017910][T24613] ? __might_sleep+0xe0/0xe0 [ 559.022512][T24613] ? rcu_read_lock_sched_held+0x89/0x130 [ 559.028165][T24613] should_fail+0x384/0x4b0 [ 559.032602][T24613] ? tomoyo_realpath_from_path+0xd8/0x610 [ 559.038338][T24613] should_failslab+0x5/0x20 [ 559.042861][T24613] __kmalloc+0x94/0x380 [ 559.047033][T24613] ? kfree+0x2f/0x2e0 [ 559.051033][T24613] tomoyo_realpath_from_path+0xd8/0x610 [ 559.056605][T24613] tomoyo_path_number_perm+0x219/0x7c0 [ 559.062090][T24613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 559.067624][T24613] security_file_ioctl+0x55/0xb0 [ 559.072578][T24613] __se_sys_ioctl+0x48/0x170 [ 559.077182][T24613] do_syscall_64+0x44/0xd0 [ 559.081613][T24613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.087517][T24613] RIP: 0033:0x7f6ef6e05059 [ 559.091984][T24613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.111602][T24613] RSP: 002b:00007f6ef577a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.120031][T24613] RAX: ffffffffffffffda RBX: 00007f6ef6f17f60 RCX: 00007f6ef6e05059 [ 559.128008][T24613] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 559.135991][T24613] RBP: 00007f6ef577a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 559.139473][T24617] FAULT_INJECTION: forcing a failure. [ 559.139473][T24617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.143978][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.144010][T24613] R13: 00007ffdc662960f R14: 00007f6ef577a300 R15: 0000000000022000 [ 559.144041][T24613] 18:23:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:23:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10284840}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10284840}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) 18:23:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x108, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 559.175981][T24617] CPU: 1 PID: 24617 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 559.184757][T24617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.194831][T24617] Call Trace: [ 559.198115][T24617] [ 559.201058][T24617] dump_stack_lvl+0x201/0x2d8 [ 559.205758][T24617] ? show_regs_print_info+0x12/0x12 [ 559.210986][T24617] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 559.216722][T24617] ? __might_fault+0xb6/0x110 [ 559.221430][T24617] ? rcu_read_lock_sched_held+0x89/0x130 [ 559.227089][T24617] should_fail+0x384/0x4b0 [ 559.231541][T24617] _copy_from_user+0x2d/0x170 [ 559.235596][T24613] ERROR: Out of memory at tomoyo_realpath_from_path. [ 559.236238][T24617] memdup_user+0x5b/0xb0 [ 559.236267][T24617] strndup_user+0x64/0xc0 [ 559.236285][T24617] __se_sys_mount+0x9a/0x3c0 [ 559.256066][T24617] ? print_irqtrace_events+0x220/0x220 [ 559.261524][T24617] ? vtime_user_exit+0x2b2/0x3e0 [ 559.266459][T24617] ? __x64_sys_mount+0xc0/0xc0 [ 559.271231][T24617] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 559.277210][T24617] ? lockdep_hardirqs_on+0x95/0x140 [ 559.282409][T24617] ? __x64_sys_mount+0x1c/0xc0 [ 559.287170][T24617] do_syscall_64+0x44/0xd0 [ 559.291583][T24617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.297468][T24617] RIP: 0033:0x7fd07601f059 [ 559.301888][T24617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.321582][T24617] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 559.329990][T24617] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 559.337956][T24617] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 559.345919][T24617] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 559.353883][T24617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.361846][T24617] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 559.369838][T24617] 18:23:35 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 2) 18:23:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (fail_nth: 2) 18:23:35 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 3) 18:23:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10284840}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8f}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x20}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x2}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x40}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3f}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x20004000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:35 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x168, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 559.548033][T24630] FAULT_INJECTION: forcing a failure. [ 559.548033][T24630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.668647][T24630] CPU: 0 PID: 24630 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 559.677541][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.677643][T24636] sp0: Synchronizing with TNC [ 559.687612][T24630] Call Trace: [ 559.687628][T24630] [ 559.687638][T24630] dump_stack_lvl+0x201/0x2d8 [ 559.687670][T24630] ? show_regs_print_info+0x12/0x12 [ 559.687690][T24630] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 559.687711][T24630] ? __might_fault+0xb6/0x110 [ 559.687732][T24630] ? rcu_read_lock_sched_held+0x89/0x130 [ 559.724424][T24630] should_fail+0x384/0x4b0 [ 559.728847][T24630] _copy_from_user+0x2d/0x170 [ 559.733536][T24630] memdup_user+0x5b/0xb0 [ 559.737771][T24630] strndup_user+0x64/0xc0 [ 559.742244][T24630] __se_sys_mount+0x9a/0x3c0 [ 559.746829][T24630] ? print_irqtrace_events+0x220/0x220 [ 559.752291][T24630] ? vtime_user_exit+0x2b2/0x3e0 [ 559.757223][T24630] ? __x64_sys_mount+0xc0/0xc0 [ 559.762109][T24630] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 559.768099][T24630] ? lockdep_hardirqs_on+0x95/0x140 [ 559.773307][T24630] ? __x64_sys_mount+0x1c/0xc0 [ 559.778075][T24630] do_syscall_64+0x44/0xd0 [ 559.782492][T24630] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.788376][T24630] RIP: 0033:0x7fe68358f059 [ 559.792791][T24630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 559.812389][T24630] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 559.820804][T24630] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 559.828880][T24630] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 559.836844][T24630] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 559.844893][T24630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.852856][T24630] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 559.860833][T24630] 18:23:36 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1d2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 559.894023][T24640] FAULT_INJECTION: forcing a failure. [ 559.894023][T24640] name failslab, interval 1, probability 0, space 0, times 0 [ 559.944347][T24640] CPU: 0 PID: 24640 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 559.953255][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.963343][T24640] Call Trace: [ 559.966643][T24640] [ 559.969585][T24640] dump_stack_lvl+0x201/0x2d8 [ 559.974282][T24640] ? show_regs_print_info+0x12/0x12 [ 559.979496][T24640] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 559.985239][T24640] ? __might_sleep+0xe0/0xe0 [ 559.989849][T24640] ? __might_fault+0xb6/0x110 [ 559.994545][T24640] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.000204][T24640] should_fail+0x384/0x4b0 [ 560.004646][T24640] ? strndup_user+0x64/0xc0 [ 560.009161][T24640] should_failslab+0x5/0x20 [ 560.013775][T24640] __kmalloc_track_caller+0x92/0x370 [ 560.019089][T24640] memdup_user+0x22/0xb0 [ 560.023350][T24640] strndup_user+0x64/0xc0 [ 560.027695][T24640] __se_sys_mount+0xdd/0x3c0 [ 560.032304][T24640] ? print_irqtrace_events+0x220/0x220 [ 560.037803][T24640] ? vtime_user_exit+0x2b2/0x3e0 [ 560.042761][T24640] ? __x64_sys_mount+0xc0/0xc0 [ 560.047539][T24640] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 560.053541][T24640] ? lockdep_hardirqs_on+0x95/0x140 [ 560.058761][T24640] ? __x64_sys_mount+0x1c/0xc0 [ 560.063551][T24640] do_syscall_64+0x44/0xd0 [ 560.067995][T24640] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.073909][T24640] RIP: 0033:0x7fd07601f059 [ 560.078343][T24640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 560.097964][T24640] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 560.106396][T24640] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 560.114368][T24640] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 560.122338][T24640] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 560.130308][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.138284][T24640] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 560.146273][T24640] [ 560.151304][T24641] FAULT_INJECTION: forcing a failure. [ 560.151304][T24641] name failslab, interval 1, probability 0, space 0, times 0 18:23:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 3) [ 560.220777][T24641] CPU: 0 PID: 24641 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller #0 [ 560.229586][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.239654][T24641] Call Trace: [ 560.242936][T24641] [ 560.245967][T24641] dump_stack_lvl+0x201/0x2d8 [ 560.250653][T24641] ? show_regs_print_info+0x12/0x12 [ 560.255850][T24641] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 560.261569][T24641] ? __might_sleep+0xe0/0xe0 [ 560.266162][T24641] should_fail+0x384/0x4b0 [ 560.270579][T24641] ? tomoyo_encode2+0x25a/0x560 [ 560.275423][T24641] should_failslab+0x5/0x20 [ 560.279921][T24641] __kmalloc+0x94/0x380 [ 560.284073][T24641] ? prepend_path+0xb70/0xb70 [ 560.288747][T24641] tomoyo_encode2+0x25a/0x560 [ 560.293420][T24641] tomoyo_realpath_from_path+0x5c3/0x610 [ 560.299063][T24641] tomoyo_path_number_perm+0x219/0x7c0 [ 560.304523][T24641] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 560.310008][T24641] security_file_ioctl+0x55/0xb0 [ 560.314950][T24641] __se_sys_ioctl+0x48/0x170 [ 560.319538][T24641] do_syscall_64+0x44/0xd0 [ 560.323956][T24641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.329837][T24641] RIP: 0033:0x7f6ef6e05059 [ 560.334240][T24641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 560.353836][T24641] RSP: 002b:00007f6ef5759168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.362242][T24641] RAX: ffffffffffffffda RBX: 00007f6ef6f18030 RCX: 00007f6ef6e05059 [ 560.370201][T24641] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003 [ 560.378162][T24641] RBP: 00007f6ef57591d0 R08: 0000000000000000 R09: 0000000000000000 [ 560.386121][T24641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.394079][T24641] R13: 00007ffdc662960f R14: 00007f6ef5759300 R15: 0000000000022000 [ 560.402060][T24641] 18:23:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) [ 560.426208][T24641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 560.489347][T24647] FAULT_INJECTION: forcing a failure. [ 560.489347][T24647] name failslab, interval 1, probability 0, space 0, times 0 [ 560.509361][T24647] CPU: 1 PID: 24647 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 560.518172][T24647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.528239][T24647] Call Trace: [ 560.531520][T24647] [ 560.534450][T24647] dump_stack_lvl+0x201/0x2d8 [ 560.539132][T24647] ? show_regs_print_info+0x12/0x12 [ 560.544327][T24647] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 560.550045][T24647] ? __might_sleep+0xe0/0xe0 [ 560.554631][T24647] ? __might_fault+0xb6/0x110 [ 560.559303][T24647] ? rcu_read_lock_sched_held+0x89/0x130 [ 560.564937][T24647] should_fail+0x384/0x4b0 [ 560.569352][T24647] ? strndup_user+0x64/0xc0 [ 560.573850][T24647] should_failslab+0x5/0x20 [ 560.578352][T24647] __kmalloc_track_caller+0x92/0x370 [ 560.583642][T24647] memdup_user+0x22/0xb0 [ 560.587878][T24647] strndup_user+0x64/0xc0 [ 560.592206][T24647] __se_sys_mount+0xdd/0x3c0 [ 560.596795][T24647] ? print_irqtrace_events+0x220/0x220 [ 560.602262][T24647] ? vtime_user_exit+0x2b2/0x3e0 [ 560.607195][T24647] ? __x64_sys_mount+0xc0/0xc0 [ 560.611967][T24647] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 560.617943][T24647] ? lockdep_hardirqs_on+0x95/0x140 [ 560.623137][T24647] ? __x64_sys_mount+0x1c/0xc0 [ 560.627900][T24647] do_syscall_64+0x44/0xd0 [ 560.632311][T24647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.638197][T24647] RIP: 0033:0x7fe68358f059 [ 560.642610][T24647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 560.662212][T24647] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 560.670622][T24647] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 560.678588][T24647] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 560.686553][T24647] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 560.694535][T24647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.702504][T24647] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 560.710482][T24647] 18:23:36 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1d3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (fail_nth: 3) 18:23:36 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 4) 18:23:36 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x22c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:37 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 4) 18:23:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) [ 560.890939][T24656] sp0: Synchronizing with TNC 18:23:37 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x22d, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 560.946960][T24661] FAULT_INJECTION: forcing a failure. [ 560.946960][T24661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.966188][T24667] FAULT_INJECTION: forcing a failure. [ 560.966188][T24667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.007345][T24668] FAULT_INJECTION: forcing a failure. [ 561.007345][T24668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.023891][T24661] CPU: 0 PID: 24661 Comm: syz-executor.2 Not tainted 5.17.0-rc4-syzkaller #0 [ 561.032685][T24661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.042744][T24661] Call Trace: [ 561.046026][T24661] [ 561.049034][T24661] dump_stack_lvl+0x201/0x2d8 [ 561.053708][T24661] ? show_regs_print_info+0x12/0x12 [ 561.058900][T24661] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.064610][T24661] ? __might_fault+0xb6/0x110 [ 561.069284][T24661] ? snprintf+0xd6/0x120 [ 561.073521][T24661] should_fail+0x384/0x4b0 [ 561.077950][T24661] _copy_to_user+0x2d/0x130 [ 561.082471][T24661] simple_read_from_buffer+0xd9/0x160 [ 561.088013][T24661] proc_fail_nth_read+0x1af/0x220 [ 561.093076][T24661] ? proc_fault_inject_write+0x3a0/0x3a0 [ 561.098707][T24661] ? security_file_permission+0x46b/0x5d0 [ 561.104418][T24661] ? proc_fault_inject_write+0x3a0/0x3a0 [ 561.110058][T24661] vfs_read+0x324/0xe60 [ 561.114212][T24661] ? kernel_read+0x200/0x200 [ 561.118802][T24661] ? mutex_lock_nested+0x1a/0x20 [ 561.123730][T24661] ? __fdget_pos+0x24e/0x2f0 [ 561.128319][T24661] ? ksys_read+0x77/0x2c0 [ 561.132637][T24661] ksys_read+0x18f/0x2c0 [ 561.136865][T24661] ? print_irqtrace_events+0x220/0x220 [ 561.142333][T24661] ? vfs_write+0xe90/0xe90 [ 561.146738][T24661] ? lockdep_hardirqs_on+0x95/0x140 [ 561.151924][T24661] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.157891][T24661] do_syscall_64+0x44/0xd0 [ 561.162295][T24661] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.168173][T24661] RIP: 0033:0x7f6ef6db7c0c [ 561.172660][T24661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 561.192251][T24661] RSP: 002b:00007f6ef5759160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 561.200656][T24661] RAX: ffffffffffffffda RBX: 00007f6ef6f18030 RCX: 00007f6ef6db7c0c [ 561.208614][T24661] RDX: 000000000000000f RSI: 00007f6ef57591e0 RDI: 0000000000000004 [ 561.216656][T24661] RBP: 00007f6ef57591d0 R08: 0000000000000000 R09: 0000000000000000 [ 561.224610][T24661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.232567][T24661] R13: 00007ffdc662960f R14: 00007f6ef5759300 R15: 0000000000022000 [ 561.240533][T24661] [ 561.260466][T24668] CPU: 0 PID: 24668 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 561.269268][T24668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.279337][T24668] Call Trace: [ 561.282623][T24668] [ 561.285549][T24668] dump_stack_lvl+0x201/0x2d8 [ 561.290243][T24668] ? show_regs_print_info+0x12/0x12 [ 561.295443][T24668] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.301259][T24668] ? __might_fault+0xb6/0x110 [ 561.305958][T24668] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.311591][T24668] should_fail+0x384/0x4b0 [ 561.316006][T24668] _copy_from_user+0x2d/0x170 [ 561.320678][T24668] memdup_user+0x5b/0xb0 [ 561.324913][T24668] strndup_user+0x64/0xc0 [ 561.329239][T24668] __se_sys_mount+0xdd/0x3c0 [ 561.333839][T24668] ? print_irqtrace_events+0x220/0x220 [ 561.339286][T24668] ? vtime_user_exit+0x2b2/0x3e0 [ 561.344233][T24668] ? __x64_sys_mount+0xc0/0xc0 [ 561.348994][T24668] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.354980][T24668] ? lockdep_hardirqs_on+0x95/0x140 [ 561.360191][T24668] ? __x64_sys_mount+0x1c/0xc0 [ 561.364947][T24668] do_syscall_64+0x44/0xd0 [ 561.369447][T24668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.375329][T24668] RIP: 0033:0x7fd07601f059 [ 561.379733][T24668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.399324][T24668] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.407724][T24668] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 561.415685][T24668] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 561.423645][T24668] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 561.431613][T24668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.439575][T24668] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 561.447549][T24668] [ 561.481454][T24667] CPU: 0 PID: 24667 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 561.490270][T24667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.500347][T24667] Call Trace: [ 561.503630][T24667] [ 561.506568][T24667] dump_stack_lvl+0x201/0x2d8 [ 561.511252][T24667] ? show_regs_print_info+0x12/0x12 [ 561.516457][T24667] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.522194][T24667] ? __might_fault+0xb6/0x110 [ 561.526888][T24667] ? rcu_read_lock_sched_held+0x89/0x130 [ 561.532607][T24667] should_fail+0x384/0x4b0 [ 561.537023][T24667] _copy_from_user+0x2d/0x170 [ 561.541698][T24667] memdup_user+0x5b/0xb0 [ 561.545955][T24667] strndup_user+0x64/0xc0 [ 561.550288][T24667] __se_sys_mount+0xdd/0x3c0 [ 561.554890][T24667] ? print_irqtrace_events+0x220/0x220 [ 561.560351][T24667] ? vtime_user_exit+0x2b2/0x3e0 [ 561.565296][T24667] ? __x64_sys_mount+0xc0/0xc0 [ 561.570050][T24667] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.576026][T24667] ? lockdep_hardirqs_on+0x95/0x140 [ 561.581232][T24667] ? __x64_sys_mount+0x1c/0xc0 [ 561.585997][T24667] do_syscall_64+0x44/0xd0 [ 561.590410][T24667] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.596297][T24667] RIP: 0033:0x7fe68358f059 [ 561.600710][T24667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.620316][T24667] RSP: 002b:00007fe681ee3168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:23:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x80, 0x30, 0x10, 0x5, 0xfe, 0x4, 0x37, 0x1, 0x500}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/348, @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf250600000008000700ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000980)=""/4096, &(0x7f0000000180)=0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) 18:23:37 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x296, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 561.628736][T24667] RAX: ffffffffffffffda RBX: 00007fe6836a2030 RCX: 00007fe68358f059 [ 561.636706][T24667] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 561.644694][T24667] RBP: 00007fe681ee31d0 R08: 00000000200001c0 R09: 0000000000000000 [ 561.652664][T24667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.660627][T24667] R13: 00007fffecafd9cf R14: 00007fe681ee3300 R15: 0000000000022000 [ 561.668602][T24667] 18:23:37 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 5) [ 561.804446][T24678] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 561.816369][T24681] FAULT_INJECTION: forcing a failure. [ 561.816369][T24681] name failslab, interval 1, probability 0, space 0, times 0 [ 561.840020][T24681] CPU: 0 PID: 24681 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 561.848819][T24681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.858883][T24681] Call Trace: [ 561.862156][T24681] [ 561.865077][T24681] dump_stack_lvl+0x201/0x2d8 [ 561.869867][T24681] ? show_regs_print_info+0x12/0x12 [ 561.875069][T24681] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 561.880790][T24681] ? __might_sleep+0xe0/0xe0 [ 561.885382][T24681] should_fail+0x384/0x4b0 [ 561.889791][T24681] ? __se_sys_mount+0x15e/0x3c0 [ 561.894714][T24681] should_failslab+0x5/0x20 [ 561.899205][T24681] kmem_cache_alloc_trace+0x71/0x330 [ 561.904533][T24681] __se_sys_mount+0x15e/0x3c0 [ 561.909252][T24681] ? print_irqtrace_events+0x220/0x220 [ 561.914704][T24681] ? vtime_user_exit+0x2b2/0x3e0 [ 561.919632][T24681] ? __x64_sys_mount+0xc0/0xc0 [ 561.924380][T24681] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 561.930346][T24681] ? lockdep_hardirqs_on+0x95/0x140 [ 561.935551][T24681] ? __x64_sys_mount+0x1c/0xc0 [ 561.940304][T24681] do_syscall_64+0x44/0xd0 [ 561.944721][T24681] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.950725][T24681] RIP: 0033:0x7fe68358f059 [ 561.955133][T24681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 561.974731][T24681] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 561.983140][T24681] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 561.991099][T24681] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 18:23:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 5) 18:23:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 561.999061][T24681] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 562.007280][T24681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.015247][T24681] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 562.023233][T24681] 18:23:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) (async) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x80, 0x30, 0x10, 0x5, 0xfe, 0x4, 0x37, 0x1, 0x500}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00096c3b340000000000000000205b71b62f52bb5e877911675f2da99318eb31549fdd45a1b64d874952272eeb0e4c082fe2ab325028131fe25648bc759f672c80020049af07c737db5224a54ede469b1e70f98686a9000000000000006e417444ca436b6e093975b4a99a5c18c3edde5e42020af0d18fde4f820076cf8effa14f09555d215e2d059b7a4d01f786619322ad129fbcfdd13828c92722543b78a3c5d11f94d1182ac95e000234df8a68bf4049dca8b1e4116fc0c749d153fc081006a52f6bd4504feac5dfe9eeb24dd49f9dfbb4e8c2ef4448d6390781cbff25952c56483b9a3bbfec2be5efa1b9371c8dfcacfd768e8c5cf10fc8021addff34bc949754241e3ca71892910807a48a5cb77622b546506a264cd5544e63f44b2e38df4c7cb321e783f15a539f63ed6502a8c8495959f4a640b4bef81ab72dcf6e31f5fe6b90ea4347a8df01335af700"/348, @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf250600000008000700ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000980)=""/4096, &(0x7f0000000180)=0x1000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) 18:23:38 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 6) [ 562.174262][T24684] sp0: Synchronizing with TNC [ 562.196451][T24689] FAULT_INJECTION: forcing a failure. [ 562.196451][T24689] name failslab, interval 1, probability 0, space 0, times 0 [ 562.212709][T24690] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 562.257846][T24689] CPU: 1 PID: 24689 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 562.266655][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.276709][T24689] Call Trace: [ 562.279987][T24689] [ 562.282913][T24689] dump_stack_lvl+0x201/0x2d8 [ 562.287594][T24689] ? show_regs_print_info+0x12/0x12 [ 562.292786][T24689] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 562.298501][T24689] ? __might_sleep+0xe0/0xe0 [ 562.303088][T24689] should_fail+0x384/0x4b0 [ 562.307503][T24689] ? __se_sys_mount+0x15e/0x3c0 [ 562.312348][T24689] should_failslab+0x5/0x20 [ 562.316844][T24689] kmem_cache_alloc_trace+0x71/0x330 [ 562.322128][T24689] __se_sys_mount+0x15e/0x3c0 [ 562.326795][T24689] ? print_irqtrace_events+0x220/0x220 [ 562.332249][T24689] ? vtime_user_exit+0x2b2/0x3e0 [ 562.337178][T24689] ? __x64_sys_mount+0xc0/0xc0 [ 562.341941][T24689] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 562.347913][T24689] ? lockdep_hardirqs_on+0x95/0x140 [ 562.353107][T24689] ? __x64_sys_mount+0x1c/0xc0 [ 562.357956][T24689] do_syscall_64+0x44/0xd0 [ 562.362374][T24689] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.368259][T24689] RIP: 0033:0x7fd07601f059 [ 562.372675][T24689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 562.392277][T24689] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 562.400693][T24689] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 18:23:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x330, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 562.408661][T24689] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 562.416624][T24689] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 562.424759][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.432725][T24689] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 562.440724][T24689] [ 562.470227][T24698] FAULT_INJECTION: forcing a failure. [ 562.470227][T24698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.495684][T24698] CPU: 0 PID: 24698 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 562.504599][T24698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.514786][T24698] Call Trace: [ 562.518077][T24698] [ 562.520997][T24698] dump_stack_lvl+0x201/0x2d8 [ 562.525680][T24698] ? show_regs_print_info+0x12/0x12 [ 562.530895][T24698] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 562.536612][T24698] ? __might_fault+0xb6/0x110 [ 562.541295][T24698] should_fail+0x384/0x4b0 [ 562.545738][T24698] _copy_from_user+0x2d/0x170 [ 562.550445][T24698] __se_sys_mount+0x181/0x3c0 [ 562.555210][T24698] ? vtime_user_exit+0x2b2/0x3e0 [ 562.560140][T24698] ? __x64_sys_mount+0xc0/0xc0 [ 562.564896][T24698] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 562.570868][T24698] ? lockdep_hardirqs_on+0x95/0x140 [ 562.576086][T24698] ? __x64_sys_mount+0x1c/0xc0 [ 562.580845][T24698] do_syscall_64+0x44/0xd0 [ 562.585257][T24698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.591140][T24698] RIP: 0033:0x7fe68358f059 [ 562.595550][T24698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 18:23:38 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 6) [ 562.615233][T24698] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 562.623825][T24698] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 562.631790][T24698] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 562.639772][T24698] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 562.648255][T24698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.656219][T24698] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 562.664283][T24698] 18:23:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) 18:23:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x80, 0x30, 0x10, 0x5, 0xfe, 0x4, 0x37, 0x1, 0x500}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/348, @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf250600000008000700ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000980)=""/4096, &(0x7f0000000180)=0x1000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) (async) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@ipmr_getroute={0x1c, 0x1a, 0x8, 0x70bd26, 0x25dfdbfd, {0x80, 0x30, 0x10, 0x5, 0xfe, 0x4, 0x37, 0x1, 0x500}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/348, @ANYRES16=r1, @ANYBLOB="000125bd7000fddbdf250600000008000700ac1414aa"], 0x1c}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) (async) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000980)=""/4096, &(0x7f0000000180)=0x1000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) (async) 18:23:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x2, &(0x7f0000000080)=0x81) 18:23:38 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x331, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 562.789079][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.796591][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.842686][T24708] sp0: Synchronizing with TNC [ 562.860989][T24706] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 562.885098][T24710] FAULT_INJECTION: forcing a failure. [ 562.885098][T24710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.902893][T24710] CPU: 0 PID: 24710 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 562.911699][T24710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.921758][T24710] Call Trace: [ 562.925040][T24710] [ 562.927960][T24710] dump_stack_lvl+0x201/0x2d8 [ 562.932650][T24710] ? show_regs_print_info+0x12/0x12 [ 562.937840][T24710] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 562.943562][T24710] ? __might_fault+0xb6/0x110 [ 562.948253][T24710] should_fail+0x384/0x4b0 [ 562.952683][T24710] _copy_from_user+0x2d/0x170 [ 562.957366][T24710] __se_sys_mount+0x181/0x3c0 [ 562.962051][T24710] ? vtime_user_exit+0x2b2/0x3e0 [ 562.966989][T24710] ? __x64_sys_mount+0xc0/0xc0 [ 562.971745][T24710] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 562.977722][T24710] ? lockdep_hardirqs_on+0x95/0x140 [ 562.982920][T24710] ? __x64_sys_mount+0x1c/0xc0 [ 562.987687][T24710] do_syscall_64+0x44/0xd0 [ 562.992119][T24710] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.998009][T24710] RIP: 0033:0x7fd07601f059 [ 563.002426][T24710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.022122][T24710] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 563.030536][T24710] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 18:23:39 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 7) [ 563.038766][T24710] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 563.046733][T24710] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 563.054702][T24710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.062666][T24710] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 563.070649][T24710] 18:23:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x10, &(0x7f0000000080)=0x81) 18:23:39 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 563.259391][T24720] FAULT_INJECTION: forcing a failure. [ 563.259391][T24720] name failslab, interval 1, probability 0, space 0, times 0 [ 563.349654][T24722] sp0: Synchronizing with TNC [ 563.367021][T24720] CPU: 0 PID: 24720 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 563.375802][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.385873][T24720] Call Trace: [ 563.389168][T24720] [ 563.392090][T24720] dump_stack_lvl+0x201/0x2d8 [ 563.396759][T24720] ? show_regs_print_info+0x12/0x12 [ 563.401942][T24720] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 563.407652][T24720] ? __might_sleep+0xe0/0xe0 [ 563.412232][T24720] should_fail+0x384/0x4b0 [ 563.416638][T24720] ? getname_flags+0xba/0x650 [ 563.421299][T24720] should_failslab+0x5/0x20 [ 563.425795][T24720] kmem_cache_alloc+0x72/0x310 [ 563.430551][T24720] getname_flags+0xba/0x650 [ 563.435046][T24720] user_path_at_empty+0x2a/0x1a0 [ 563.440063][T24720] __se_sys_mount+0x2cd/0x3c0 [ 563.444728][T24720] ? vtime_user_exit+0x2b2/0x3e0 [ 563.449656][T24720] ? __x64_sys_mount+0xc0/0xc0 [ 563.454415][T24720] ? lockdep_hardirqs_on+0x95/0x140 [ 563.459622][T24720] ? __x64_sys_mount+0x1c/0xc0 [ 563.464394][T24720] do_syscall_64+0x44/0xd0 [ 563.468812][T24720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 563.474693][T24720] RIP: 0033:0x7fe68358f059 [ 563.479100][T24720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 563.498704][T24720] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 563.507115][T24720] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 563.515104][T24720] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 563.523067][T24720] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 563.531033][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.538995][T24720] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 563.546994][T24720] 18:23:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x4, 0xbbca, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:23:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5409, &(0x7f0000000080)=0x81) 18:23:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x4, 0xbbca, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:23:39 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x600, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 563.709413][T24729] sp0: Synchronizing with TNC 18:23:39 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 7) [ 563.929903][T24737] FAULT_INJECTION: forcing a failure. [ 563.929903][T24737] name failslab, interval 1, probability 0, space 0, times 0 [ 563.943221][T24737] CPU: 0 PID: 24737 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 563.952101][T24737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.962169][T24737] Call Trace: [ 563.966499][T24737] [ 563.969444][T24737] dump_stack_lvl+0x201/0x2d8 [ 563.974155][T24737] ? show_regs_print_info+0x12/0x12 [ 563.979386][T24737] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 563.985136][T24737] ? __might_sleep+0xe0/0xe0 [ 563.989760][T24737] should_fail+0x384/0x4b0 [ 563.994210][T24737] ? getname_flags+0xba/0x650 [ 563.998911][T24737] should_failslab+0x5/0x20 [ 564.003436][T24737] kmem_cache_alloc+0x72/0x310 [ 564.008231][T24737] getname_flags+0xba/0x650 [ 564.012764][T24737] user_path_at_empty+0x2a/0x1a0 [ 564.017740][T24737] __se_sys_mount+0x2cd/0x3c0 [ 564.022449][T24737] ? vtime_user_exit+0x2b2/0x3e0 [ 564.027409][T24737] ? __x64_sys_mount+0xc0/0xc0 [ 564.032191][T24737] ? lockdep_hardirqs_on+0x95/0x140 [ 564.037397][T24737] ? __x64_sys_mount+0x1c/0xc0 [ 564.042174][T24737] do_syscall_64+0x44/0xd0 [ 564.046624][T24737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 564.052541][T24737] RIP: 0033:0x7fd07601f059 [ 564.056978][T24737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.076602][T24737] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.085044][T24737] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 564.093041][T24737] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 564.101028][T24737] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 564.109019][T24737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.117003][T24737] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 564.125003][T24737] 18:23:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x4, 0xbbca, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:23:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x700, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x540b, &(0x7f0000000080)=0x81) 18:23:40 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 8) 18:23:40 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) (fail_nth: 8) [ 564.267314][T24742] sp0: Synchronizing with TNC 18:23:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 564.287914][T24748] FAULT_INJECTION: forcing a failure. [ 564.287914][T24748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.304411][T24751] FAULT_INJECTION: forcing a failure. [ 564.304411][T24751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.373520][T24748] CPU: 0 PID: 24748 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 564.382403][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.392460][T24748] Call Trace: [ 564.395751][T24748] [ 564.398677][T24748] dump_stack_lvl+0x201/0x2d8 [ 564.403350][T24748] ? show_regs_print_info+0x12/0x12 [ 564.408542][T24748] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 564.414258][T24748] ? __might_fault+0xb6/0x110 [ 564.419020][T24748] ? rcu_read_lock_sched_held+0x89/0x130 [ 564.424655][T24748] should_fail+0x384/0x4b0 [ 564.429073][T24748] strncpy_from_user+0x32/0x350 [ 564.433929][T24748] getname_flags+0xf0/0x650 [ 564.438451][T24748] user_path_at_empty+0x2a/0x1a0 [ 564.443419][T24748] __se_sys_mount+0x2cd/0x3c0 [ 564.448088][T24748] ? vtime_user_exit+0x2b2/0x3e0 [ 564.453017][T24748] ? __x64_sys_mount+0xc0/0xc0 [ 564.457776][T24748] ? lockdep_hardirqs_on+0x95/0x140 [ 564.463065][T24748] ? __x64_sys_mount+0x1c/0xc0 [ 564.467823][T24748] do_syscall_64+0x44/0xd0 [ 564.472244][T24748] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 564.478159][T24748] RIP: 0033:0x7fe68358f059 [ 564.482565][T24748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.502181][T24748] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.510594][T24748] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 18:23:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) [ 564.518572][T24748] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 564.526540][T24748] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 564.534508][T24748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.542474][T24748] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 564.550454][T24748] [ 564.593671][T24751] CPU: 1 PID: 24751 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 564.602493][T24751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.612818][T24751] Call Trace: [ 564.616117][T24751] [ 564.619056][T24751] dump_stack_lvl+0x201/0x2d8 [ 564.623732][T24751] ? show_regs_print_info+0x12/0x12 [ 564.628923][T24751] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 564.634633][T24751] ? __might_fault+0xb6/0x110 [ 564.639306][T24751] ? rcu_read_lock_sched_held+0x89/0x130 [ 564.644946][T24751] should_fail+0x384/0x4b0 [ 564.649494][T24751] strncpy_from_user+0x32/0x350 [ 564.654426][T24751] getname_flags+0xf0/0x650 [ 564.658933][T24751] user_path_at_empty+0x2a/0x1a0 [ 564.663889][T24751] __se_sys_mount+0x2cd/0x3c0 [ 564.668575][T24751] ? vtime_user_exit+0x2b2/0x3e0 [ 564.673508][T24751] ? __x64_sys_mount+0xc0/0xc0 [ 564.678269][T24751] ? lockdep_hardirqs_on+0x95/0x140 [ 564.683472][T24751] ? __x64_sys_mount+0x1c/0xc0 [ 564.688233][T24751] do_syscall_64+0x44/0xd0 [ 564.692644][T24751] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 564.698525][T24751] RIP: 0033:0x7fd07601f059 [ 564.702931][T24751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 564.722531][T24751] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 564.730943][T24751] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 18:23:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x540c, &(0x7f0000000080)=0x81) 18:23:40 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x900, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 564.738903][T24751] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 564.746873][T24751] RBP: 00007fd0749941d0 R08: 00000000200001c0 R09: 0000000000000000 [ 564.755112][T24751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.763108][T24751] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 564.771101][T24751] 18:23:40 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 9) 18:23:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 564.946256][T24762] sp0: Synchronizing with TNC [ 564.987657][T24764] FAULT_INJECTION: forcing a failure. [ 564.987657][T24764] name failslab, interval 1, probability 0, space 0, times 0 [ 565.038750][T24764] CPU: 1 PID: 24764 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 565.047557][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.057718][T24764] Call Trace: [ 565.061013][T24764] [ 565.063954][T24764] dump_stack_lvl+0x201/0x2d8 [ 565.068653][T24764] ? show_regs_print_info+0x12/0x12 [ 565.073864][T24764] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 565.079606][T24764] ? __might_sleep+0xe0/0xe0 [ 565.084226][T24764] should_fail+0x384/0x4b0 [ 565.088665][T24764] ? tomoyo_encode2+0x25a/0x560 [ 565.093530][T24764] should_failslab+0x5/0x20 [ 565.098049][T24764] __kmalloc+0x94/0x380 [ 565.102223][T24764] ? kernel_text_address+0x9e/0xd0 [ 565.107464][T24764] tomoyo_encode2+0x25a/0x560 [ 565.112178][T24764] tomoyo_mount_permission+0x319/0xbc0 [ 565.117670][T24764] ? stack_trace_save+0x11b/0x1e0 [ 565.122851][T24764] ? stack_trace_snprint+0xe0/0xe0 [ 565.127979][T24764] ? rcu_read_lock_sched_held+0x89/0x130 [ 565.133630][T24764] ? asan.module_dtor+0x20/0x20 [ 565.138486][T24764] ? kmem_cache_free+0xb6/0x1c0 [ 565.143325][T24764] ? user_path_at_empty+0x149/0x1a0 [ 565.148511][T24764] ? __se_sys_mount+0x2cd/0x3c0 [ 565.153354][T24764] ? do_syscall_64+0x44/0xd0 [ 565.158015][T24764] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 565.164082][T24764] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 565.170050][T24764] security_sb_mount+0x70/0xd0 [ 565.174801][T24764] path_mount+0x12e/0x2c30 [ 565.179213][T24764] ? slab_free_freelist_hook+0x12e/0x1a0 [ 565.184940][T24764] ? mark_mounts_for_expiry+0x520/0x520 [ 565.190473][T24764] ? user_path_at_empty+0x149/0x1a0 [ 565.195656][T24764] ? kmem_cache_free+0xb6/0x1c0 [ 565.200507][T24764] ? user_path_at_empty+0x149/0x1a0 [ 565.205706][T24764] __se_sys_mount+0x308/0x3c0 [ 565.210372][T24764] ? vtime_user_exit+0x2b2/0x3e0 [ 565.215301][T24764] ? __x64_sys_mount+0xc0/0xc0 [ 565.220053][T24764] ? lockdep_hardirqs_on+0x95/0x140 [ 565.225293][T24764] ? __x64_sys_mount+0x1c/0xc0 [ 565.230047][T24764] do_syscall_64+0x44/0xd0 [ 565.234451][T24764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 565.240334][T24764] RIP: 0033:0x7fe68358f059 [ 565.244757][T24764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.264367][T24764] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 565.272790][T24764] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 565.280749][T24764] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 565.288708][T24764] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 565.296675][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.304637][T24764] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 565.312703][T24764] 18:23:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) 18:23:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x540d, &(0x7f0000000080)=0x81) 18:23:41 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:41 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 10) 18:23:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) [ 565.534591][T24771] sp0: Synchronizing with TNC 18:23:41 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb93, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5413, &(0x7f0000000080)=0x81) 18:23:41 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 565.680730][T24786] FAULT_INJECTION: forcing a failure. [ 565.680730][T24786] name failslab, interval 1, probability 0, space 0, times 0 18:23:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x804c040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) [ 565.756709][T24786] CPU: 1 PID: 24786 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 565.765515][T24786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.775589][T24786] Call Trace: [ 565.778886][T24786] [ 565.781830][T24786] dump_stack_lvl+0x201/0x2d8 [ 565.786530][T24786] ? show_regs_print_info+0x12/0x12 [ 565.791749][T24786] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 565.797501][T24786] ? __might_sleep+0xe0/0xe0 [ 565.802125][T24786] should_fail+0x384/0x4b0 [ 565.806574][T24786] ? tomoyo_encode2+0x25a/0x560 [ 565.811449][T24786] should_failslab+0x5/0x20 [ 565.815970][T24786] __kmalloc+0x94/0x380 [ 565.820148][T24786] ? kernel_text_address+0x9e/0xd0 [ 565.825291][T24786] tomoyo_encode2+0x25a/0x560 [ 565.829997][T24786] tomoyo_mount_permission+0x319/0xbc0 [ 565.835479][T24786] ? stack_trace_save+0x11b/0x1e0 [ 565.840689][T24786] ? stack_trace_snprint+0xe0/0xe0 [ 565.845804][T24786] ? rcu_read_lock_sched_held+0x89/0x130 [ 565.851447][T24786] ? asan.module_dtor+0x20/0x20 [ 565.856317][T24786] ? kmem_cache_free+0xb6/0x1c0 [ 565.861170][T24786] ? user_path_at_empty+0x149/0x1a0 [ 565.866372][T24786] ? __se_sys_mount+0x2cd/0x3c0 [ 565.871222][T24786] ? do_syscall_64+0x44/0xd0 [ 565.875808][T24786] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 565.881890][T24786] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 565.887873][T24786] security_sb_mount+0x70/0xd0 [ 565.892642][T24786] path_mount+0x12e/0x2c30 [ 565.897064][T24786] ? slab_free_freelist_hook+0x12e/0x1a0 [ 565.902695][T24786] ? mark_mounts_for_expiry+0x520/0x520 [ 565.908240][T24786] ? user_path_at_empty+0x149/0x1a0 [ 565.913435][T24786] ? kmem_cache_free+0xb6/0x1c0 [ 565.918284][T24786] ? user_path_at_empty+0x149/0x1a0 [ 565.923479][T24786] __se_sys_mount+0x308/0x3c0 [ 565.928153][T24786] ? vtime_user_exit+0x2b2/0x3e0 [ 565.933087][T24786] ? __x64_sys_mount+0xc0/0xc0 [ 565.937848][T24786] ? lockdep_hardirqs_on+0x95/0x140 [ 565.943045][T24786] ? __x64_sys_mount+0x1c/0xc0 [ 565.947822][T24786] do_syscall_64+0x44/0xd0 [ 565.952242][T24786] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 565.958127][T24786] RIP: 0033:0x7fe68358f059 [ 565.962541][T24786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 565.982143][T24786] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 565.990557][T24786] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 565.998525][T24786] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 18:23:42 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 566.006499][T24786] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 566.014465][T24786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.022436][T24786] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 566.030417][T24786] [ 566.113817][T24793] sp0: Synchronizing with TNC 18:23:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) 18:23:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x804c040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 18:23:42 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc67, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:42 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5414, &(0x7f0000000080)=0x81) 18:23:42 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (fail_nth: 11) 18:23:42 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 566.555285][T24806] FAULT_INJECTION: forcing a failure. [ 566.555285][T24806] name failslab, interval 1, probability 0, space 0, times 0 [ 566.608154][T24808] sp0: Synchronizing with TNC [ 566.635048][T24806] CPU: 0 PID: 24806 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 566.643860][T24806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.653932][T24806] Call Trace: [ 566.657223][T24806] [ 566.660165][T24806] dump_stack_lvl+0x201/0x2d8 [ 566.664869][T24806] ? show_regs_print_info+0x12/0x12 [ 566.670088][T24806] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 566.675839][T24806] ? __might_sleep+0xe0/0xe0 [ 566.680542][T24806] should_fail+0x384/0x4b0 [ 566.684980][T24806] ? tomoyo_encode2+0x25a/0x560 [ 566.689840][T24806] should_failslab+0x5/0x20 [ 566.694357][T24806] __kmalloc+0x94/0x380 [ 566.698541][T24806] ? prepend_path+0xb70/0xb70 [ 566.703239][T24806] tomoyo_encode2+0x25a/0x560 [ 566.707943][T24806] tomoyo_realpath_from_path+0x5c3/0x610 [ 566.713609][T24806] tomoyo_mount_permission+0x380/0xbc0 [ 566.719094][T24806] ? stack_trace_save+0x11b/0x1e0 [ 566.724142][T24806] ? stack_trace_snprint+0xe0/0xe0 [ 566.729305][T24806] ? rcu_read_lock_sched_held+0x89/0x130 [ 566.734958][T24806] ? asan.module_dtor+0x20/0x20 [ 566.740297][T24806] ? kmem_cache_free+0xb6/0x1c0 [ 566.745174][T24806] ? user_path_at_empty+0x149/0x1a0 [ 566.750388][T24806] ? __se_sys_mount+0x2cd/0x3c0 [ 566.755254][T24806] ? do_syscall_64+0x44/0xd0 [ 566.759863][T24806] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 566.765982][T24806] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 566.772082][T24806] security_sb_mount+0x70/0xd0 [ 566.776879][T24806] path_mount+0x12e/0x2c30 [ 566.781329][T24806] ? slab_free_freelist_hook+0x12e/0x1a0 [ 566.786986][T24806] ? mark_mounts_for_expiry+0x520/0x520 [ 566.792615][T24806] ? user_path_at_empty+0x149/0x1a0 [ 566.797845][T24806] ? kmem_cache_free+0xb6/0x1c0 [ 566.802725][T24806] ? user_path_at_empty+0x149/0x1a0 [ 566.807943][T24806] __se_sys_mount+0x308/0x3c0 [ 566.812641][T24806] ? vtime_user_exit+0x2b2/0x3e0 [ 566.817607][T24806] ? __x64_sys_mount+0xc0/0xc0 [ 566.822395][T24806] ? lockdep_hardirqs_on+0x95/0x140 [ 566.827621][T24806] ? __x64_sys_mount+0x1c/0xc0 [ 566.832503][T24806] do_syscall_64+0x44/0xd0 [ 566.836937][T24806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 566.842928][T24806] RIP: 0033:0x7fe68358f059 [ 566.847355][T24806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 566.867149][T24806] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 566.875589][T24806] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 18:23:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x804c040) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x801, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x804c040) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) 18:23:43 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 566.883587][T24806] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 566.891577][T24806] RBP: 00007fe681f041d0 R08: 00000000200001c0 R09: 0000000000000000 [ 566.899558][T24806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.907550][T24806] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 566.915564][T24806] 18:23:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5415, &(0x7f0000000080)=0x81) 18:23:43 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:43 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 567.165697][T24826] sp0: Synchronizing with TNC [ 567.209513][T24830] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 567.239696][T24830] CPU: 0 PID: 24830 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 567.248500][T24830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.258571][T24830] Call Trace: [ 567.261856][T24830] [ 567.264774][T24830] dump_stack_lvl+0x201/0x2d8 [ 567.269450][T24830] ? show_regs_print_info+0x12/0x12 [ 567.274643][T24830] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 567.280383][T24830] sysfs_create_dir_ns+0x2c4/0x390 [ 567.285493][T24830] ? sysfs_warn_dup+0xa0/0xa0 [ 567.290157][T24830] ? do_raw_spin_unlock+0x134/0x8a0 [ 567.295363][T24830] kobject_add_internal+0x418/0xb50 [ 567.300596][T24830] kobject_add+0x14c/0x210 [ 567.305003][T24830] ? kobject_init+0x1d0/0x1d0 [ 567.309672][T24830] ? get_device_parent+0x2cd/0x430 [ 567.314785][T24830] device_add+0x523/0x16d0 [ 567.319235][T24830] ? virtual_device_parent+0x50/0x50 [ 567.324536][T24830] ? memcpy+0x3c/0x60 [ 567.328527][T24830] device_create+0x252/0x2e0 [ 567.333117][T24830] ? vsnprintf+0x18e/0x1d40 [ 567.337610][T24830] ? root_device_unregister+0x100/0x100 [ 567.343157][T24830] ? __percpu_counter_init+0x1fd/0x230 [ 567.348628][T24830] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 567.354961][T24830] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 567.361299][T24830] bdi_register_va+0x86/0x530 [ 567.365984][T24830] super_setup_bdi_name+0xe0/0x1f0 [ 567.371090][T24830] ? __lock_acquire+0x2b00/0x2b00 [ 567.376107][T24830] ? vfs_get_tree+0x270/0x270 [ 567.380778][T24830] ? do_raw_spin_unlock+0x134/0x8a0 [ 567.385983][T24830] fuse_fill_super_common+0x6e1/0x11a0 [ 567.391443][T24830] ? fuse_init_fs_context_submount+0x40/0x40 [ 567.397542][T24830] ? snprintf+0xd6/0x120 [ 567.401786][T24830] ? vscnprintf+0x80/0x80 [ 567.406191][T24830] ? set_blocksize+0x1d5/0x360 [ 567.411032][T24830] fuse_fill_super+0x170/0x1e0 [ 567.415782][T24830] get_tree_bdev+0x406/0x630 [ 567.420367][T24830] ? fuse_reconfigure+0xb0/0xb0 [ 567.425232][T24830] fuse_get_tree+0x31c/0x4a0 [ 567.429834][T24830] vfs_get_tree+0x86/0x270 [ 567.434246][T24830] path_mount+0x1986/0x2c30 [ 567.438830][T24830] ? slab_free_freelist_hook+0x12e/0x1a0 [ 567.444468][T24830] ? mark_mounts_for_expiry+0x520/0x520 [ 567.450017][T24830] ? user_path_at_empty+0x149/0x1a0 [ 567.455207][T24830] ? kmem_cache_free+0xb6/0x1c0 [ 567.460047][T24830] ? user_path_at_empty+0x149/0x1a0 [ 567.465230][T24830] __se_sys_mount+0x308/0x3c0 [ 567.469893][T24830] ? vtime_user_exit+0x2b2/0x3e0 [ 567.474817][T24830] ? __x64_sys_mount+0xc0/0xc0 [ 567.479656][T24830] ? lockdep_hardirqs_on+0x95/0x140 [ 567.484856][T24830] ? __x64_sys_mount+0x1c/0xc0 [ 567.489609][T24830] do_syscall_64+0x44/0xd0 [ 567.494017][T24830] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 567.499896][T24830] RIP: 0033:0x7fd07601f059 [ 567.504300][T24830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 567.523921][T24830] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 567.532347][T24830] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 567.540307][T24830] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 567.548282][T24830] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 [ 567.556250][T24830] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 567.564303][T24830] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 567.572277][T24830] [ 567.602691][T24830] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 567.633678][T24806] ERROR: Out of memory at tomoyo_realpath_from_path. 18:23:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) 18:23:43 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1020, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5416, &(0x7f0000000080)=0x81) 18:23:43 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:43 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 567.743347][T24835] sp0: Synchronizing with TNC 18:23:43 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1100, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5417, &(0x7f0000000080)=0x81) 18:23:44 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:44 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1200, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:44 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 568.021650][T24847] sp0: Synchronizing with TNC 18:23:44 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5418, &(0x7f0000000080)=0x81) [ 568.245910][T24856] sp0: Synchronizing with TNC 18:23:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) 18:23:44 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:44 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:44 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000014000600767863616e31000000000000000000002b00070073797374656d5f753a6f675f68656c7053f200141a0300fc02000000000000000004000000000114000200fe80000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r8, @ANYBLOB="010826bd70000000000001000000"], 0x14}}, 0x4097) 18:23:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x541b, &(0x7f0000000080)=0x81) 18:23:44 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2010, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 568.789169][T24865] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 568.795021][T24866] sp0: Synchronizing with TNC [ 568.843954][T24865] CPU: 0 PID: 24865 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 568.853081][T24865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.863157][T24865] Call Trace: [ 568.866437][T24865] [ 568.869358][T24865] dump_stack_lvl+0x201/0x2d8 [ 568.874138][T24865] ? show_regs_print_info+0x12/0x12 [ 568.879329][T24865] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 568.885042][T24865] sysfs_create_dir_ns+0x2c4/0x390 [ 568.890217][T24865] ? sysfs_warn_dup+0xa0/0xa0 [ 568.894886][T24865] ? do_raw_spin_unlock+0x134/0x8a0 [ 568.900093][T24865] kobject_add_internal+0x418/0xb50 [ 568.905289][T24865] kobject_add+0x14c/0x210 [ 568.909693][T24865] ? kobject_init+0x1d0/0x1d0 [ 568.914384][T24865] ? get_device_parent+0x2cd/0x430 [ 568.919494][T24865] device_add+0x523/0x16d0 [ 568.923914][T24865] ? virtual_device_parent+0x50/0x50 [ 568.929213][T24865] ? memcpy+0x3c/0x60 [ 568.933186][T24865] device_create+0x252/0x2e0 [ 568.937766][T24865] ? vsnprintf+0x18e/0x1d40 [ 568.942258][T24865] ? root_device_unregister+0x100/0x100 [ 568.947794][T24865] ? __percpu_counter_init+0x1fd/0x230 [ 568.953245][T24865] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 568.959563][T24865] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 568.965881][T24865] bdi_register_va+0x86/0x530 [ 568.970554][T24865] super_setup_bdi_name+0xe0/0x1f0 [ 568.975661][T24865] ? __lock_acquire+0x2b00/0x2b00 [ 568.980682][T24865] ? vfs_get_tree+0x270/0x270 [ 568.985348][T24865] ? do_raw_spin_unlock+0x134/0x8a0 [ 568.990626][T24865] fuse_fill_super_common+0x6e1/0x11a0 [ 568.996082][T24865] ? fuse_init_fs_context_submount+0x40/0x40 [ 569.002052][T24865] ? snprintf+0xd6/0x120 [ 569.006288][T24865] ? vscnprintf+0x80/0x80 [ 569.010606][T24865] ? set_blocksize+0x1d5/0x360 [ 569.015361][T24865] fuse_fill_super+0x170/0x1e0 [ 569.020129][T24865] get_tree_bdev+0x406/0x630 [ 569.024725][T24865] ? fuse_reconfigure+0xb0/0xb0 [ 569.029563][T24865] fuse_get_tree+0x31c/0x4a0 [ 569.034160][T24865] vfs_get_tree+0x86/0x270 [ 569.038568][T24865] path_mount+0x1986/0x2c30 [ 569.043067][T24865] ? slab_free_freelist_hook+0x12e/0x1a0 [ 569.048692][T24865] ? mark_mounts_for_expiry+0x520/0x520 [ 569.054231][T24865] ? user_path_at_empty+0x149/0x1a0 [ 569.059504][T24865] ? kmem_cache_free+0xb6/0x1c0 [ 569.064350][T24865] ? user_path_at_empty+0x149/0x1a0 [ 569.069536][T24865] __se_sys_mount+0x308/0x3c0 [ 569.074198][T24865] ? vtime_user_exit+0x2b2/0x3e0 [ 569.079122][T24865] ? __x64_sys_mount+0xc0/0xc0 [ 569.083875][T24865] ? lockdep_hardirqs_on+0x95/0x140 [ 569.089064][T24865] ? __x64_sys_mount+0x1c/0xc0 [ 569.093818][T24865] do_syscall_64+0x44/0xd0 [ 569.098663][T24865] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 569.104547][T24865] RIP: 0033:0x7fe68358f059 [ 569.108969][T24865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 569.128565][T24865] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 569.136973][T24865] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 569.144934][T24865] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 569.152892][T24865] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 [ 569.160849][T24865] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 569.168836][T24865] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 569.176898][T24865] 18:23:45 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 569.188644][T24865] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 569.240021][T24870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 18:23:45 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:45 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000080)=0x81) 18:23:45 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 569.565409][T24883] sp0: Synchronizing with TNC 18:23:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)) 18:23:45 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000014000600767863616e31000000000000000000002b00070073797374656d5f753a6f675f68656c7053f200141a0300fc02000000000000000004000000000114000200fe80000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) (async, rerun: 32) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r8, @ANYBLOB="010826bd70000000000001000000"], 0x14}}, 0x4097) 18:23:45 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2c02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:45 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:45 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000080)=0x81) 18:23:45 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2d02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 569.867065][T24895] sp0: Synchronizing with TNC 18:23:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:46 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:46 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000300000014000600767863616e31000000000000000000002b00070073797374656d5f753a6f675f68656c7053f200141a0300fc02000000000000000004000000000114000200fe80000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) (async) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES64=r8, @ANYBLOB="010826bd70000000000001000000"], 0x14}}, 0x4097) 18:23:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x541e, &(0x7f0000000080)=0x81) 18:23:46 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3003, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 570.117082][T24909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 570.219642][T24915] sp0: Synchronizing with TNC 18:23:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5421, &(0x7f0000000080)=0x81) 18:23:46 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:46 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:46 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3103, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:46 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0108000000000100000000000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24008004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) 18:23:46 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 570.750966][T24926] sp0: Synchronizing with TNC 18:23:46 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0108000000000100000000000000"], 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24008004) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) 18:23:46 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:46 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000080)=0x81) 18:23:47 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:47 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:47 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0108000000000100000000000000"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24008004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0108000000000100000000000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x24008004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) (async) 18:23:47 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 570.968312][T24940] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 570.998411][T24940] CPU: 1 PID: 24940 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 571.007219][T24940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.017295][T24940] Call Trace: [ 571.020669][T24940] [ 571.023611][T24940] dump_stack_lvl+0x201/0x2d8 [ 571.028344][T24940] ? show_regs_print_info+0x12/0x12 [ 571.033579][T24940] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 571.039347][T24940] sysfs_create_dir_ns+0x2c4/0x390 [ 571.044489][T24940] ? sysfs_warn_dup+0xa0/0xa0 [ 571.049160][T24940] ? do_raw_spin_unlock+0x134/0x8a0 [ 571.054353][T24940] kobject_add_internal+0x418/0xb50 [ 571.059555][T24940] kobject_add+0x14c/0x210 [ 571.063987][T24940] ? kobject_init+0x1d0/0x1d0 [ 571.068655][T24940] ? get_device_parent+0x2cd/0x430 [ 571.073820][T24940] device_add+0x523/0x16d0 [ 571.078317][T24940] ? virtual_device_parent+0x50/0x50 [ 571.083585][T24940] ? memcpy+0x3c/0x60 [ 571.087565][T24940] device_create+0x252/0x2e0 [ 571.092150][T24940] ? vsnprintf+0x18e/0x1d40 [ 571.096643][T24940] ? root_device_unregister+0x100/0x100 [ 571.102527][T24940] ? __percpu_counter_init+0x1fd/0x230 [ 571.108082][T24940] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 571.114400][T24940] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 571.120717][T24940] bdi_register_va+0x86/0x530 [ 571.125400][T24940] super_setup_bdi_name+0xe0/0x1f0 [ 571.130540][T24940] ? __lock_acquire+0x2b00/0x2b00 [ 571.135559][T24940] ? vfs_get_tree+0x270/0x270 [ 571.140228][T24940] ? do_raw_spin_unlock+0x134/0x8a0 [ 571.145421][T24940] fuse_fill_super_common+0x6e1/0x11a0 [ 571.150876][T24940] ? fuse_init_fs_context_submount+0x40/0x40 [ 571.156842][T24940] ? snprintf+0xd6/0x120 [ 571.161078][T24940] ? vscnprintf+0x80/0x80 [ 571.165396][T24940] ? set_blocksize+0x1d5/0x360 [ 571.170152][T24940] fuse_fill_super+0x170/0x1e0 [ 571.175086][T24940] get_tree_bdev+0x406/0x630 [ 571.179668][T24940] ? fuse_reconfigure+0xb0/0xb0 [ 571.184509][T24940] fuse_get_tree+0x31c/0x4a0 [ 571.189092][T24940] vfs_get_tree+0x86/0x270 [ 571.193497][T24940] path_mount+0x1986/0x2c30 [ 571.198000][T24940] ? slab_free_freelist_hook+0x12e/0x1a0 [ 571.203669][T24940] ? mark_mounts_for_expiry+0x520/0x520 [ 571.209205][T24940] ? user_path_at_empty+0x149/0x1a0 [ 571.214391][T24940] ? kmem_cache_free+0xb6/0x1c0 [ 571.219251][T24940] ? user_path_at_empty+0x149/0x1a0 [ 571.224439][T24940] __se_sys_mount+0x308/0x3c0 [ 571.229108][T24940] ? vtime_user_exit+0x2b2/0x3e0 [ 571.234042][T24940] ? __x64_sys_mount+0xc0/0xc0 [ 571.238798][T24940] ? lockdep_hardirqs_on+0x95/0x140 [ 571.243992][T24940] ? __x64_sys_mount+0x1c/0xc0 [ 571.248764][T24940] do_syscall_64+0x44/0xd0 [ 571.253174][T24940] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.259074][T24940] RIP: 0033:0x7fe68358f059 [ 571.263485][T24940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.283084][T24940] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 571.291492][T24940] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 571.299450][T24940] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 571.307505][T24940] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 18:23:47 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 571.315475][T24940] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 571.323435][T24940] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 571.331408][T24940] [ 571.406145][T24940] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 571.423600][T24955] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 571.435794][T24955] CPU: 1 PID: 24955 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 571.444599][T24955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 571.454669][T24955] Call Trace: [ 571.457945][T24955] [ 571.460871][T24955] dump_stack_lvl+0x201/0x2d8 [ 571.465561][T24955] ? show_regs_print_info+0x12/0x12 [ 571.470755][T24955] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 571.476574][T24955] sysfs_create_dir_ns+0x2c4/0x390 [ 571.481686][T24955] ? sysfs_warn_dup+0xa0/0xa0 [ 571.486361][T24955] ? do_raw_spin_unlock+0x134/0x8a0 [ 571.491573][T24955] kobject_add_internal+0x418/0xb50 [ 571.496778][T24955] kobject_add+0x14c/0x210 [ 571.501190][T24955] ? kobject_init+0x1d0/0x1d0 [ 571.505870][T24955] ? get_device_parent+0x2cd/0x430 [ 571.510983][T24955] device_add+0x523/0x16d0 [ 571.515404][T24955] ? virtual_device_parent+0x50/0x50 [ 571.520685][T24955] ? memcpy+0x3c/0x60 [ 571.524934][T24955] device_create+0x252/0x2e0 [ 571.529528][T24955] ? vsnprintf+0x18e/0x1d40 [ 571.534053][T24955] ? root_device_unregister+0x100/0x100 [ 571.539621][T24955] ? __percpu_counter_init+0x1fd/0x230 [ 571.545094][T24955] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 571.551418][T24955] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 571.557744][T24955] bdi_register_va+0x86/0x530 [ 571.562561][T24955] super_setup_bdi_name+0xe0/0x1f0 [ 571.567672][T24955] ? __lock_acquire+0x2b00/0x2b00 [ 571.572772][T24955] ? vfs_get_tree+0x270/0x270 [ 571.577488][T24955] ? do_raw_spin_unlock+0x134/0x8a0 [ 571.582711][T24955] fuse_fill_super_common+0x6e1/0x11a0 [ 571.588178][T24955] ? fuse_init_fs_context_submount+0x40/0x40 [ 571.594157][T24955] ? snprintf+0xd6/0x120 [ 571.598403][T24955] ? vscnprintf+0x80/0x80 [ 571.602731][T24955] ? set_blocksize+0x1d5/0x360 [ 571.607498][T24955] fuse_fill_super+0x170/0x1e0 [ 571.612270][T24955] get_tree_bdev+0x406/0x630 [ 571.616870][T24955] ? fuse_reconfigure+0xb0/0xb0 [ 571.621717][T24955] fuse_get_tree+0x31c/0x4a0 [ 571.626315][T24955] vfs_get_tree+0x86/0x270 [ 571.630728][T24955] path_mount+0x1986/0x2c30 [ 571.635231][T24955] ? slab_free_freelist_hook+0x12e/0x1a0 [ 571.640862][T24955] ? mark_mounts_for_expiry+0x520/0x520 [ 571.646404][T24955] ? user_path_at_empty+0x149/0x1a0 [ 571.651681][T24955] ? kmem_cache_free+0xb6/0x1c0 [ 571.656527][T24955] ? user_path_at_empty+0x149/0x1a0 [ 571.661724][T24955] __se_sys_mount+0x308/0x3c0 [ 571.666396][T24955] ? vtime_user_exit+0x2b2/0x3e0 [ 571.671327][T24955] ? __x64_sys_mount+0xc0/0xc0 [ 571.676087][T24955] ? lockdep_hardirqs_on+0x95/0x140 [ 571.681284][T24955] ? __x64_sys_mount+0x1c/0xc0 [ 571.686253][T24955] do_syscall_64+0x44/0xd0 [ 571.690774][T24955] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 571.696662][T24955] RIP: 0033:0x7fd07601f059 [ 571.701083][T24955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 571.720685][T24955] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 571.729126][T24955] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 571.737109][T24955] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 571.745079][T24955] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 18:23:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5424, &(0x7f0000000080)=0x81) [ 571.753044][T24955] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 571.761007][T24955] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 571.768988][T24955] [ 571.790099][T24957] fuseblk: Bad value for 'fd' 18:23:47 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:47 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0108000000000000deff00000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000013bd5ab7adf2c0713eb000000009000800"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000827bd7000fddbdf25130000000c000600031a6c3744990000"], 0x20}, 0x1, 0x0, 0x0, 0x20008841}, 0x20000810) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf251f0000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r9, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3000000063bfbe168e6e412fb11573e0a366922da605dedbb88df6ddfaa19cd5238b8ec753dc528654870cc1aa7b76879cf8ef5a720d1983e961c1d391bfaa"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 18:23:48 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 571.883430][T24959] sp0: Synchronizing with TNC 18:23:48 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0108000000000000deff00000000"], 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000013bd5ab7adf2c0713eb000000009000800"], 0x14}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000827bd7000fddbdf25130000000c000600031a6c3744990000"], 0x20}, 0x1, 0x0, 0x0, 0x20008841}, 0x20000810) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf251f0000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r9, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3000000063bfbe168e6e412fb11573e0a366922da605dedbb88df6ddfaa19cd5238b8ec753dc528654870cc1aa7b76879cf8ef5a720d1983e961c1d391bfaa"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) [ 571.953907][T24955] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 571.993610][T24966] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' 18:23:48 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 572.046059][T24966] CPU: 1 PID: 24966 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 572.054983][T24966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.065060][T24966] Call Trace: [ 572.068537][T24966] [ 572.071482][T24966] dump_stack_lvl+0x201/0x2d8 [ 572.076187][T24966] ? show_regs_print_info+0x12/0x12 [ 572.081404][T24966] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 572.087130][T24966] sysfs_create_dir_ns+0x2c4/0x390 [ 572.092251][T24966] ? sysfs_warn_dup+0xa0/0xa0 [ 572.096954][T24966] ? do_raw_spin_unlock+0x134/0x8a0 [ 572.102150][T24966] kobject_add_internal+0x418/0xb50 [ 572.107354][T24966] kobject_add+0x14c/0x210 [ 572.111762][T24966] ? kobject_init+0x1d0/0x1d0 [ 572.116434][T24966] ? get_device_parent+0x2cd/0x430 [ 572.121534][T24966] device_add+0x523/0x16d0 [ 572.126131][T24966] ? virtual_device_parent+0x50/0x50 [ 572.131406][T24966] ? memcpy+0x3c/0x60 [ 572.135385][T24966] device_create+0x252/0x2e0 [ 572.139967][T24966] ? vsnprintf+0x18e/0x1d40 [ 572.144453][T24966] ? root_device_unregister+0x100/0x100 [ 572.150101][T24966] ? __percpu_counter_init+0x1fd/0x230 [ 572.155645][T24966] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 572.161966][T24966] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 572.168487][T24966] bdi_register_va+0x86/0x530 [ 572.173179][T24966] super_setup_bdi_name+0xe0/0x1f0 [ 572.178549][T24966] ? __lock_acquire+0x2b00/0x2b00 [ 572.183564][T24966] ? vfs_get_tree+0x270/0x270 [ 572.188231][T24966] ? do_raw_spin_unlock+0x134/0x8a0 [ 572.193422][T24966] fuse_fill_super_common+0x6e1/0x11a0 [ 572.198883][T24966] ? fuse_init_fs_context_submount+0x40/0x40 [ 572.204862][T24966] ? snprintf+0xd6/0x120 [ 572.209100][T24966] ? vscnprintf+0x80/0x80 [ 572.213427][T24966] ? set_blocksize+0x1d5/0x360 [ 572.218190][T24966] fuse_fill_super+0x170/0x1e0 [ 572.222987][T24966] get_tree_bdev+0x406/0x630 [ 572.227569][T24966] ? fuse_reconfigure+0xb0/0xb0 [ 572.232408][T24966] fuse_get_tree+0x31c/0x4a0 [ 572.236986][T24966] vfs_get_tree+0x86/0x270 [ 572.241391][T24966] path_mount+0x1986/0x2c30 [ 572.245887][T24966] ? slab_free_freelist_hook+0x12e/0x1a0 [ 572.251504][T24966] ? mark_mounts_for_expiry+0x520/0x520 [ 572.257050][T24966] ? user_path_at_empty+0x149/0x1a0 [ 572.262232][T24966] ? kmem_cache_free+0xb6/0x1c0 [ 572.267074][T24966] ? user_path_at_empty+0x149/0x1a0 [ 572.272277][T24966] __se_sys_mount+0x308/0x3c0 [ 572.276945][T24966] ? vtime_user_exit+0x2b2/0x3e0 [ 572.281889][T24966] ? __x64_sys_mount+0xc0/0xc0 [ 572.286648][T24966] ? lockdep_hardirqs_on+0x95/0x140 [ 572.291845][T24966] ? __x64_sys_mount+0x1c/0xc0 [ 572.296605][T24966] do_syscall_64+0x44/0xd0 [ 572.301041][T24966] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 572.306923][T24966] RIP: 0033:0x7fe68358f059 [ 572.311328][T24966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.330938][T24966] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 572.339341][T24966] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 18:23:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000080)=0x81) [ 572.347308][T24966] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 572.355273][T24966] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 [ 572.363327][T24966] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 572.371421][T24966] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 572.379409][T24966] 18:23:48 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 572.427870][T24966] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:48 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:48 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 572.631772][T24980] sp0: Synchronizing with TNC [ 572.679399][T24984] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 572.692881][T24984] CPU: 1 PID: 24984 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 572.701669][T24984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.711732][T24984] Call Trace: [ 572.715011][T24984] [ 572.717945][T24984] dump_stack_lvl+0x201/0x2d8 [ 572.722638][T24984] ? show_regs_print_info+0x12/0x12 [ 572.728003][T24984] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 572.733731][T24984] sysfs_create_dir_ns+0x2c4/0x390 [ 572.738856][T24984] ? sysfs_warn_dup+0xa0/0xa0 [ 572.743548][T24984] ? do_raw_spin_unlock+0x134/0x8a0 [ 572.748893][T24984] kobject_add_internal+0x418/0xb50 [ 572.754096][T24984] kobject_add+0x14c/0x210 [ 572.758746][T24984] ? kobject_init+0x1d0/0x1d0 [ 572.763513][T24984] ? get_device_parent+0x2cd/0x430 [ 572.768639][T24984] device_add+0x523/0x16d0 [ 572.773082][T24984] ? virtual_device_parent+0x50/0x50 [ 572.778410][T24984] ? memcpy+0x3c/0x60 [ 572.782400][T24984] device_create+0x252/0x2e0 [ 572.787022][T24984] ? vsnprintf+0x18e/0x1d40 [ 572.791543][T24984] ? root_device_unregister+0x100/0x100 [ 572.797125][T24984] ? __percpu_counter_init+0x1fd/0x230 [ 572.808332][T24984] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 572.815212][T24984] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 572.821563][T24984] bdi_register_va+0x86/0x530 [ 572.826499][T24984] super_setup_bdi_name+0xe0/0x1f0 [ 572.831755][T24984] ? __lock_acquire+0x2b00/0x2b00 [ 572.837490][T24984] ? vfs_get_tree+0x270/0x270 [ 572.842174][T24984] ? do_raw_spin_unlock+0x134/0x8a0 [ 572.847461][T24984] fuse_fill_super_common+0x6e1/0x11a0 [ 572.852930][T24984] ? fuse_init_fs_context_submount+0x40/0x40 [ 572.858901][T24984] ? snprintf+0xd6/0x120 [ 572.863145][T24984] ? vscnprintf+0x80/0x80 [ 572.867553][T24984] ? set_blocksize+0x1d5/0x360 [ 572.872324][T24984] fuse_fill_super+0x170/0x1e0 [ 572.877146][T24984] get_tree_bdev+0x406/0x630 [ 572.881745][T24984] ? fuse_reconfigure+0xb0/0xb0 [ 572.886617][T24984] fuse_get_tree+0x31c/0x4a0 [ 572.891367][T24984] vfs_get_tree+0x86/0x270 [ 572.895878][T24984] path_mount+0x1986/0x2c30 [ 572.900652][T24984] ? slab_free_freelist_hook+0x12e/0x1a0 [ 572.906371][T24984] ? mark_mounts_for_expiry+0x520/0x520 [ 572.911931][T24984] ? user_path_at_empty+0x149/0x1a0 [ 572.917126][T24984] ? kmem_cache_free+0xb6/0x1c0 [ 572.921972][T24984] ? user_path_at_empty+0x149/0x1a0 [ 572.927426][T24984] __se_sys_mount+0x308/0x3c0 [ 572.932103][T24984] ? vtime_user_exit+0x2b2/0x3e0 [ 572.937035][T24984] ? __x64_sys_mount+0xc0/0xc0 [ 572.941881][T24984] ? lockdep_hardirqs_on+0x95/0x140 [ 572.947082][T24984] ? __x64_sys_mount+0x1c/0xc0 [ 572.952032][T24984] do_syscall_64+0x44/0xd0 [ 572.956442][T24984] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 572.962428][T24984] RIP: 0033:0x7fc3cea2f059 [ 572.966832][T24984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 572.986514][T24984] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 572.994930][T24984] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 573.002901][T24984] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 573.010862][T24984] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 573.018824][T24984] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 18:23:49 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0108000000000000deff00000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000013bd5ab7adf2c0713eb000000009000800"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000827bd7000fddbdf25130000000c000600031a6c3744990000"], 0x20}, 0x1, 0x0, 0x0, 0x20008841}, 0x20000810) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf251f0000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r9, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3000000063bfbe168e6e412fb11573e0a366922da605dedbb88df6ddfaa19cd5238b8ec753dc528654870cc1aa7b76879cf8ef5a720d1983e961c1d391bfaa"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0108000000000000deff00000000"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) (async) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000000013bd5ab7adf2c0713eb000000009000800"], 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000827bd7000fddbdf25130000000c000600031a6c3744990000"], 0x20}, 0x1, 0x0, 0x0, 0x20008841}, 0x20000810) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r11, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00012cbd7000fcdbdf251f0000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e3300000008000200", @ANYRES32=r9, @ANYBLOB="0a0001007770616e3400000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r12, @ANYBLOB="0a0001007770616e3000000063bfbe168e6e412fb11573e0a366922da605dedbb88df6ddfaa19cd5238b8ec753dc528654870cc1aa7b76879cf8ef5a720d1983e961c1d391bfaa"], 0x64}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) (async) 18:23:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000080)=0x81) [ 573.026791][T24984] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 573.034771][T24984] 18:23:49 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 573.089132][T24984] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:49 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 573.227541][T24993] sp0: Synchronizing with TNC 18:23:49 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) 18:23:49 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5428, &(0x7f0000000080)=0x81) 18:23:49 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x25, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 573.424567][T25015] sp0: Synchronizing with TNC 18:23:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) 18:23:49 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) 18:23:49 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x48, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x542a, &(0x7f0000000080)=0x81) 18:23:49 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 573.727211][T25037] sp0: Synchronizing with TNC 18:23:49 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:49 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5437, &(0x7f0000000080)=0x81) 18:23:49 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:49 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 573.949782][T25049] sp0: Synchronizing with TNC 18:23:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5427, &(0x7f0000000080)=0x81) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000080)=0x81) 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x64, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 574.151975][T25064] sp0: Synchronizing with TNC 18:23:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0) 18:23:50 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 574.217115][T25071] sp1: Synchronizing with TNC 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:50 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5450, &(0x7f0000000080)=0x81) 18:23:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0) 18:23:50 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5441, &(0x7f0000000080)=0x81) [ 574.474451][T25088] sp0: Synchronizing with TNC 18:23:50 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000044) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x14}}, 0x0) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9602, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5451, &(0x7f0000000080)=0x81) 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 574.617739][T25098] sp0: Synchronizing with TNC 18:23:50 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:50 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 574.773660][T25110] sp0: Synchronizing with TNC 18:23:50 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:50 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) 18:23:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000080)=0x81) 18:23:51 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd201, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:51 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x25, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 575.017617][T25131] sp0: Synchronizing with TNC 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd301, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x545d, &(0x7f0000000080)=0x81) 18:23:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x48, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xedc0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x2, [0x800, 0x2, 0x6], [{0x7, 0x252, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x40}, {0x8, 0x8bd}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xfffffffc, 0x3, 0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x1, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1, 0x1}], 0x3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xfffffffffffff8e0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0xfffffffffffff8e0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0xfffffffffffff8e0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x100, 0x88, &(0x7f00000002c0)=""/136, 0x40f00, 0xe, '\x00', 0x0, 0x16, r5, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, r6, 0x0, &(0x7f0000000400)=[r0, 0x1, r0, r7, r8, 0x1]}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) 18:23:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x108, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 575.292403][T25150] sp0: Synchronizing with TNC 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xff00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5452, &(0x7f0000000080)=0x81) 18:23:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5460, &(0x7f0000000080)=0x81) 18:23:51 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x2, [0x800, 0x2, 0x6], [{0x7, 0x252, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x40}, {0x8, 0x8bd}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xfffffffc, 0x3, 0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x1, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1, 0x1}], 0x3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xfffffffffffff8e0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0xfffffffffffff8e0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0xfffffffffffff8e0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x100, 0x88, &(0x7f00000002c0)=""/136, 0x40f00, 0xe, '\x00', 0x0, 0x16, r5, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, r6, 0x0, &(0x7f0000000400)=[r0, 0x1, r0, r7, r8, 0x1]}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x2, [0x800, 0x2, 0x6], [{0x7, 0x252, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x40}, {0x8, 0x8bd}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xfffffffc, 0x3, 0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x1, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1, 0x1}], 0x3}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xfffffffffffff8e0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0xfffffffffffff8e0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0xfffffffffffff8e0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x100, 0x88, &(0x7f00000002c0)=""/136, 0x40f00, 0xe, '\x00', 0x0, 0x16, r5, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, r6, 0x0, &(0x7f0000000400)=[r0, 0x1, r0, r7, r8, 0x1]}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r1) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) (async) 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 575.497004][T25165] sp0: Synchronizing with TNC 18:23:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 575.522589][T25169] sp1: Synchronizing with TNC 18:23:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x168, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 5: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x2, [0x800, 0x2, 0x6], [{0x7, 0x252, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x1, 0xffffffff, 0x1, 0x1, 0x0, 0x1}, {0x80000001, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x100, 0x40}, {0x8, 0x8bd}, {0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xfffffffc, 0x3, 0x1, 0x0, 0x1}, {0x3ff, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xffff, 0x0, 0x1, 0x1}, {0xfffffffc, 0x2, 0x1, 0x1, 0x1}], 0x3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0xfffffffffffff8e0) (async) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x141200, 0x0) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0xfffffffffffff8e0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r8, 0xfffffffffffff8e0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5}, [@map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='syzkaller\x00', 0x100, 0x88, &(0x7f00000002c0)=""/136, 0x40f00, 0xe, '\x00', 0x0, 0x16, r5, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6, 0x5}, 0x10, 0x0, r6, 0x0, &(0x7f0000000400)=[r0, 0x1, r0, r7, r8, 0x1]}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x801}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xac, r9, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:inetd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x40051) 18:23:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x541d, &(0x7f0000000080)=0x81) 18:23:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x8933, &(0x7f0000000080)=0x81) 18:23:51 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1d2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:51 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x64, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:51 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 575.764774][T25191] sp0: Synchronizing with TNC 18:23:51 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd70000000eeff000000005e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 575.800154][T25193] sp1: Synchronizing with TNC 18:23:52 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1d3, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1fffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x400448c9, &(0x7f0000000080)=0x81) 18:23:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd70000000eeff000000005e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd70000000eeff000000005e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 18:23:52 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x22c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 576.016720][T25210] sp0: Synchronizing with TNC 18:23:52 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x22d, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x400448dd, &(0x7f0000000080)=0x81) 18:23:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd70000000eeff000000005e"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x296, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 5: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 576.317978][T25239] sp0: Synchronizing with TNC 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1080000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 5: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:52 executing program 5: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 576.468997][T25253] fuseblk: Bad value for 'fd' 18:23:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x400454ca, &(0x7f0000000080)=0x81) 18:23:52 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x400448dd, &(0x7f0000000080)=0x81) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xab, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x801, 0x0, 0x3, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:ssh_exec_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 576.663132][T25259] sp0: Synchronizing with TNC 18:23:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x40049409, &(0x7f0000000080)=0x81) 18:23:52 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xad, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:52 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x801, 0x0, 0x3, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:ssh_exec_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x801, 0x0, 0x3, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:ssh_exec_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async) [ 576.842391][T25268] sp0: Synchronizing with TNC 18:23:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x330, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 576.878921][T25272] sp1: Synchronizing with TNC 18:23:53 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x40086602, &(0x7f0000000080)=0x81) 18:23:53 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x331, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x801, 0x0, 0x3, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:ssh_exec_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x801, 0x0, 0x3, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:ssh_exec_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async) [ 577.096401][T25294] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 577.137654][T25294] CPU: 1 PID: 25294 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 577.139766][T25295] sp0: Synchronizing with TNC [ 577.146457][T25294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.146476][T25294] Call Trace: [ 577.146483][T25294] [ 577.146492][T25294] dump_stack_lvl+0x201/0x2d8 [ 577.146525][T25294] ? show_regs_print_info+0x12/0x12 [ 577.146546][T25294] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 577.183197][T25294] sysfs_create_dir_ns+0x2c4/0x390 [ 577.188309][T25294] ? sysfs_warn_dup+0xa0/0xa0 [ 577.192997][T25294] ? do_raw_spin_unlock+0x134/0x8a0 [ 577.198192][T25294] kobject_add_internal+0x418/0xb50 [ 577.203387][T25294] kobject_add+0x14c/0x210 [ 577.207821][T25294] ? kobject_init+0x1d0/0x1d0 [ 577.212486][T25294] ? get_device_parent+0x2cd/0x430 [ 577.217588][T25294] device_add+0x523/0x16d0 [ 577.221996][T25294] ? virtual_device_parent+0x50/0x50 [ 577.227267][T25294] ? memcpy+0x3c/0x60 [ 577.231252][T25294] device_create+0x252/0x2e0 [ 577.235850][T25294] ? vsnprintf+0x18e/0x1d40 [ 577.240351][T25294] ? root_device_unregister+0x100/0x100 [ 577.245918][T25294] ? __percpu_counter_init+0x1fd/0x230 [ 577.251398][T25294] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 577.257723][T25294] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 577.264055][T25294] bdi_register_va+0x86/0x530 [ 577.268727][T25294] super_setup_bdi_name+0xe0/0x1f0 [ 577.273827][T25294] ? __lock_acquire+0x2b00/0x2b00 [ 577.278861][T25294] ? vfs_get_tree+0x270/0x270 [ 577.283538][T25294] ? do_raw_spin_unlock+0x134/0x8a0 [ 577.288741][T25294] fuse_fill_super_common+0x6e1/0x11a0 [ 577.294291][T25294] ? fuse_init_fs_context_submount+0x40/0x40 [ 577.300269][T25294] ? snprintf+0xd6/0x120 [ 577.304530][T25294] ? vscnprintf+0x80/0x80 [ 577.308878][T25294] ? set_blocksize+0x1d5/0x360 [ 577.313638][T25294] fuse_fill_super+0x170/0x1e0 [ 577.318414][T25294] get_tree_bdev+0x406/0x630 [ 577.322998][T25294] ? fuse_reconfigure+0xb0/0xb0 [ 577.327836][T25294] fuse_get_tree+0x31c/0x4a0 [ 577.332434][T25294] vfs_get_tree+0x86/0x270 [ 577.336859][T25294] path_mount+0x1986/0x2c30 [ 577.341356][T25294] ? slab_free_freelist_hook+0x12e/0x1a0 [ 577.346980][T25294] ? mark_mounts_for_expiry+0x520/0x520 [ 577.352531][T25294] ? user_path_at_empty+0x149/0x1a0 [ 577.357730][T25294] ? kmem_cache_free+0xb6/0x1c0 [ 577.362575][T25294] ? user_path_at_empty+0x149/0x1a0 [ 577.367764][T25294] __se_sys_mount+0x308/0x3c0 [ 577.372429][T25294] ? vtime_user_exit+0x2b2/0x3e0 [ 577.377388][T25294] ? __x64_sys_mount+0xc0/0xc0 [ 577.382158][T25294] ? lockdep_hardirqs_on+0x95/0x140 [ 577.387348][T25294] ? __x64_sys_mount+0x1c/0xc0 [ 577.392168][T25294] do_syscall_64+0x44/0xd0 [ 577.396603][T25294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 577.402584][T25294] RIP: 0033:0x7fc3cea2f059 [ 577.406991][T25294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 577.426671][T25294] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:23:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 577.435077][T25294] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 577.443036][T25294] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 577.450993][T25294] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 577.458947][T25294] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 577.466922][T25294] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 577.474988][T25294] 18:23:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 577.527743][T25294] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x40186366, &(0x7f0000000080)=0x81) 18:23:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:53 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x108, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:53 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x600, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 577.732974][T25316] sp0: Synchronizing with TNC 18:23:53 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) 18:23:53 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x401c5820, &(0x7f0000000080)=0x81) 18:23:54 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x114, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x700, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 577.998103][T25339] sp0: Synchronizing with TNC 18:23:54 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x115, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x114, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x4020940d, &(0x7f0000000080)=0x81) 18:23:54 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) 18:23:54 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x166, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 578.269639][T25357] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 578.284645][T25356] sp0: Synchronizing with TNC [ 578.321695][T25357] CPU: 0 PID: 25357 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 578.330501][T25357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.340568][T25357] Call Trace: [ 578.343864][T25357] [ 578.346802][T25357] dump_stack_lvl+0x201/0x2d8 [ 578.351509][T25357] ? show_regs_print_info+0x12/0x12 [ 578.356735][T25357] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 578.362503][T25357] sysfs_create_dir_ns+0x2c4/0x390 [ 578.367650][T25357] ? sysfs_warn_dup+0xa0/0xa0 [ 578.372364][T25357] ? do_raw_spin_unlock+0x134/0x8a0 [ 578.377592][T25357] kobject_add_internal+0x418/0xb50 [ 578.382809][T25357] kobject_add+0x14c/0x210 [ 578.387220][T25357] ? kobject_init+0x1d0/0x1d0 [ 578.391888][T25357] ? get_device_parent+0x2cd/0x430 [ 578.396987][T25357] device_add+0x523/0x16d0 [ 578.401398][T25357] ? virtual_device_parent+0x50/0x50 [ 578.406667][T25357] ? memcpy+0x3c/0x60 [ 578.410640][T25357] device_create+0x252/0x2e0 [ 578.415233][T25357] ? vsnprintf+0x18e/0x1d40 [ 578.419722][T25357] ? root_device_unregister+0x100/0x100 [ 578.425262][T25357] ? __percpu_counter_init+0x1fd/0x230 [ 578.430710][T25357] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 578.437153][T25357] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 578.443489][T25357] bdi_register_va+0x86/0x530 [ 578.448172][T25357] super_setup_bdi_name+0xe0/0x1f0 [ 578.453278][T25357] ? __lock_acquire+0x2b00/0x2b00 [ 578.458296][T25357] ? vfs_get_tree+0x270/0x270 [ 578.462962][T25357] ? do_raw_spin_unlock+0x134/0x8a0 [ 578.468150][T25357] fuse_fill_super_common+0x6e1/0x11a0 [ 578.473611][T25357] ? fuse_init_fs_context_submount+0x40/0x40 [ 578.479594][T25357] ? snprintf+0xd6/0x120 [ 578.483838][T25357] ? vscnprintf+0x80/0x80 [ 578.488160][T25357] ? set_blocksize+0x1d5/0x360 [ 578.492919][T25357] fuse_fill_super+0x170/0x1e0 [ 578.497675][T25357] get_tree_bdev+0x406/0x630 [ 578.502253][T25357] ? fuse_reconfigure+0xb0/0xb0 [ 578.507103][T25357] fuse_get_tree+0x31c/0x4a0 [ 578.511693][T25357] vfs_get_tree+0x86/0x270 [ 578.516099][T25357] path_mount+0x1986/0x2c30 [ 578.520595][T25357] ? slab_free_freelist_hook+0x12e/0x1a0 [ 578.526214][T25357] ? mark_mounts_for_expiry+0x520/0x520 [ 578.531744][T25357] ? user_path_at_empty+0x149/0x1a0 [ 578.537114][T25357] ? kmem_cache_free+0xb6/0x1c0 [ 578.541970][T25357] ? user_path_at_empty+0x149/0x1a0 [ 578.547173][T25357] __se_sys_mount+0x308/0x3c0 [ 578.551853][T25357] ? vtime_user_exit+0x2b2/0x3e0 [ 578.556890][T25357] ? __x64_sys_mount+0xc0/0xc0 [ 578.561654][T25357] ? lockdep_hardirqs_on+0x95/0x140 [ 578.566851][T25357] ? __x64_sys_mount+0x1c/0xc0 [ 578.571677][T25357] do_syscall_64+0x44/0xd0 [ 578.576096][T25357] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 578.581976][T25357] RIP: 0033:0x7fc3cea2f059 [ 578.586374][T25357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 578.605962][T25357] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 578.614373][T25357] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 18:23:54 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x167, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x28}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) [ 578.622326][T25357] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 578.630281][T25357] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 578.638234][T25357] R10: 0000000000000114 R11: 0000000000000246 R12: 0000000000000000 [ 578.646272][T25357] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 578.654270][T25357] 18:23:54 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x900, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 578.683425][T25365] fuseblk: Bad value for 'fd' 18:23:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000080)=0x81) 18:23:54 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:54 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r6) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24004001) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r3, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) [ 578.993918][T25379] sp0: Synchronizing with TNC [ 579.386779][T25357] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:55 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:55 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x298, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:23:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x80045440, &(0x7f0000000080)=0x81) 18:23:55 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:55 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:55 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 579.565832][T25391] sp0: Synchronizing with TNC 18:23:55 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:55 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x299, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x80086301, &(0x7f0000000080)=0x81) [ 579.745171][T25399] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 579.803944][T25399] CPU: 0 PID: 25399 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 579.812772][T25399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.822846][T25399] Call Trace: [ 579.822937][T25404] sp0: Synchronizing with TNC [ 579.826134][T25399] [ 579.826147][T25399] dump_stack_lvl+0x201/0x2d8 [ 579.826179][T25399] ? show_regs_print_info+0x12/0x12 [ 579.826201][T25399] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 579.849430][T25399] sysfs_create_dir_ns+0x2c4/0x390 [ 579.854817][T25399] ? sysfs_warn_dup+0xa0/0xa0 [ 579.859528][T25399] ? do_raw_spin_unlock+0x134/0x8a0 [ 579.864732][T25399] kobject_add_internal+0x418/0xb50 [ 579.869934][T25399] kobject_add+0x14c/0x210 [ 579.874363][T25399] ? kobject_init+0x1d0/0x1d0 [ 579.879054][T25399] ? get_device_parent+0x2cd/0x430 [ 579.884168][T25399] device_add+0x523/0x16d0 [ 579.888584][T25399] ? virtual_device_parent+0x50/0x50 [ 579.893853][T25399] ? memcpy+0x3c/0x60 [ 579.897828][T25399] device_create+0x252/0x2e0 [ 579.902411][T25399] ? vsnprintf+0x18e/0x1d40 [ 579.907047][T25399] ? root_device_unregister+0x100/0x100 [ 579.912584][T25399] ? __percpu_counter_init+0x1fd/0x230 [ 579.918043][T25399] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 579.924397][T25399] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 579.930771][T25399] bdi_register_va+0x86/0x530 [ 579.935454][T25399] super_setup_bdi_name+0xe0/0x1f0 [ 579.940557][T25399] ? __lock_acquire+0x2b00/0x2b00 [ 579.945581][T25399] ? vfs_get_tree+0x270/0x270 [ 579.950252][T25399] ? do_raw_spin_unlock+0x134/0x8a0 [ 579.955456][T25399] fuse_fill_super_common+0x6e1/0x11a0 [ 579.960910][T25399] ? fuse_init_fs_context_submount+0x40/0x40 [ 579.966960][T25399] ? snprintf+0xd6/0x120 [ 579.971215][T25399] ? vscnprintf+0x80/0x80 [ 579.975551][T25399] ? set_blocksize+0x1d5/0x360 [ 579.980326][T25399] fuse_fill_super+0x170/0x1e0 [ 579.985082][T25399] get_tree_bdev+0x406/0x630 [ 579.989697][T25399] ? fuse_reconfigure+0xb0/0xb0 [ 579.994549][T25399] fuse_get_tree+0x31c/0x4a0 [ 579.999147][T25399] vfs_get_tree+0x86/0x270 [ 580.003554][T25399] path_mount+0x1986/0x2c30 [ 580.008050][T25399] ? slab_free_freelist_hook+0x12e/0x1a0 [ 580.013675][T25399] ? mark_mounts_for_expiry+0x520/0x520 [ 580.019220][T25399] ? user_path_at_empty+0x149/0x1a0 [ 580.024416][T25399] ? kmem_cache_free+0xb6/0x1c0 [ 580.029280][T25399] ? user_path_at_empty+0x149/0x1a0 [ 580.034482][T25399] __se_sys_mount+0x308/0x3c0 [ 580.039209][T25399] ? vtime_user_exit+0x2b2/0x3e0 [ 580.044136][T25399] ? __x64_sys_mount+0xc0/0xc0 [ 580.048914][T25399] ? lockdep_hardirqs_on+0x95/0x140 [ 580.054102][T25399] ? __x64_sys_mount+0x1c/0xc0 [ 580.058855][T25399] do_syscall_64+0x44/0xd0 [ 580.063261][T25399] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 580.069162][T25399] RIP: 0033:0x7fc3cea2f059 [ 580.073568][T25399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.093161][T25399] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:23:56 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 580.101594][T25399] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 580.109557][T25399] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 580.117513][T25399] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 580.125470][T25399] R10: 000000000b000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.133426][T25399] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 580.141392][T25399] 18:23:56 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 580.221515][T25399] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 580.253132][T25408] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 580.268227][T25408] CPU: 1 PID: 25408 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 580.277003][T25408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.287229][T25408] Call Trace: [ 580.290525][T25408] [ 580.293473][T25408] dump_stack_lvl+0x201/0x2d8 [ 580.298151][T25408] ? show_regs_print_info+0x12/0x12 [ 580.303357][T25408] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 580.309072][T25408] sysfs_create_dir_ns+0x2c4/0x390 [ 580.314190][T25408] ? sysfs_warn_dup+0xa0/0xa0 [ 580.318861][T25408] ? do_raw_spin_unlock+0x134/0x8a0 [ 580.324053][T25408] kobject_add_internal+0x418/0xb50 [ 580.329245][T25408] kobject_add+0x14c/0x210 [ 580.333651][T25408] ? kobject_init+0x1d0/0x1d0 [ 580.338318][T25408] ? get_device_parent+0x2cd/0x430 [ 580.343423][T25408] device_add+0x523/0x16d0 [ 580.347921][T25408] ? virtual_device_parent+0x50/0x50 [ 580.353199][T25408] ? memcpy+0x3c/0x60 [ 580.357177][T25408] device_create+0x252/0x2e0 [ 580.361758][T25408] ? vsnprintf+0x18e/0x1d40 [ 580.366247][T25408] ? root_device_unregister+0x100/0x100 [ 580.371784][T25408] ? __percpu_counter_init+0x1fd/0x230 [ 580.377251][T25408] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 580.383567][T25408] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 580.389921][T25408] bdi_register_va+0x86/0x530 [ 580.394597][T25408] super_setup_bdi_name+0xe0/0x1f0 [ 580.399695][T25408] ? __lock_acquire+0x2b00/0x2b00 [ 580.404741][T25408] ? vfs_get_tree+0x270/0x270 [ 580.409406][T25408] ? do_raw_spin_unlock+0x134/0x8a0 [ 580.414597][T25408] fuse_fill_super_common+0x6e1/0x11a0 [ 580.420050][T25408] ? fuse_init_fs_context_submount+0x40/0x40 [ 580.426040][T25408] ? snprintf+0xd6/0x120 [ 580.430271][T25408] ? vscnprintf+0x80/0x80 [ 580.434691][T25408] ? set_blocksize+0x1d5/0x360 [ 580.439465][T25408] fuse_fill_super+0x170/0x1e0 [ 580.444223][T25408] get_tree_bdev+0x406/0x630 [ 580.448819][T25408] ? fuse_reconfigure+0xb0/0xb0 [ 580.453662][T25408] fuse_get_tree+0x31c/0x4a0 [ 580.458260][T25408] vfs_get_tree+0x86/0x270 [ 580.462756][T25408] path_mount+0x1986/0x2c30 [ 580.467257][T25408] ? slab_free_freelist_hook+0x12e/0x1a0 [ 580.472879][T25408] ? mark_mounts_for_expiry+0x520/0x520 [ 580.478411][T25408] ? user_path_at_empty+0x149/0x1a0 [ 580.483632][T25408] ? kmem_cache_free+0xb6/0x1c0 [ 580.488474][T25408] ? user_path_at_empty+0x149/0x1a0 [ 580.493660][T25408] __se_sys_mount+0x308/0x3c0 [ 580.498334][T25408] ? vtime_user_exit+0x2b2/0x3e0 [ 580.503256][T25408] ? __x64_sys_mount+0xc0/0xc0 [ 580.508006][T25408] ? lockdep_hardirqs_on+0x95/0x140 [ 580.513278][T25408] ? __x64_sys_mount+0x1c/0xc0 [ 580.518164][T25408] do_syscall_64+0x44/0xd0 [ 580.522658][T25408] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 580.528636][T25408] RIP: 0033:0x7fd07601f059 [ 580.533038][T25408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 580.552661][T25408] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 580.561094][T25408] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 580.569065][T25408] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 580.577025][T25408] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 [ 580.584984][T25408] R10: 0000000000000b00 R11: 0000000000000246 R12: 0000000000000000 [ 580.592960][T25408] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 580.600932][T25408] [ 580.643534][T25408] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:23:56 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x299, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:56 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) 18:23:56 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2ea, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x80086601, &(0x7f0000000080)=0x81) 18:23:56 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:56 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb93, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 580.867012][T25419] sp0: Synchronizing with TNC 18:23:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2eb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x801c581f, &(0x7f0000000080)=0x81) 18:23:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x168, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b55d10f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1822b249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4749335e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b339640}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf16f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cdde62c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6230}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bee082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b24a9d}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c524e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6df376c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abc87a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da2d9a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f985f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7676bb9c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c59905e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd126106}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d416a41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77be85}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d1967fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475ba7d9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x20044891}, 0xfbe6185792e1bcc3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010800dc0600cbc48e7b00000000"], 0x14}}, 0x0) 18:23:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x168, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b55d10f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1822b249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4749335e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b339640}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf16f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cdde62c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6230}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bee082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b24a9d}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c524e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6df376c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abc87a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da2d9a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f985f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7676bb9c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c59905e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd126106}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d416a41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77be85}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d1967fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475ba7d9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x20044891}, 0xfbe6185792e1bcc3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010800dc0600cbc48e7b00000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x168, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b55d10f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1822b249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4749335e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b339640}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf16f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cdde62c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6230}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bee082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b24a9d}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c524e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6df376c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abc87a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da2d9a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f985f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7676bb9c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c59905e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd126106}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d416a41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77be85}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d1967fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475ba7d9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x20044891}, 0xfbe6185792e1bcc3) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010800dc0600cbc48e7b00000000"], 0x14}}, 0x0) (async) 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 581.094724][T25435] sp0: Synchronizing with TNC 18:23:57 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000080)=0x81) 18:23:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc67, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x330, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x168, r5, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b55d10f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1822b249}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4749335e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b339640}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1a3e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf16f}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x77b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cdde62c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa3f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea5c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6230}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25bee082}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b24a9d}]}, {0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c524e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6df376c8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1abc87a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5da2d9a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40f985f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7676bb9c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c59905e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd126106}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d416a41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x79}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b77be85}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc895}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ae0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d1967fe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x475ba7d9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x20044891}, 0xfbe6185792e1bcc3) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010800dc0600cbc48e7b00000000"], 0x14}}, 0x0) 18:23:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 581.344814][T25453] sp0: Synchronizing with TNC 18:23:57 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb93, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0xc0045878, &(0x7f0000000080)=0x81) 18:23:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x331, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="12621ffd3900000000a4f9b80001"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x7c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r7, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c008891}, 0x4841) 18:23:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:57 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb93, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 581.595154][T25471] sp0: Synchronizing with TNC 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20100000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x352, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:57 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="12621ffd3900000000a4f9b80001"], 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x7c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r7, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c008891}, 0x4841) [ 581.678783][T25482] loop0: Can't mount, would change RO state 18:23:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000080)=0x81) 18:23:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x80045432, &(0x7f0000000080)=0x81) 18:23:57 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1020, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:57 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x25000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="12621ffd3900000000a4f9b80001"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x7c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:inetd_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x40005) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r7, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2c008891}, 0x4841) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x353, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 581.868772][T25491] sp0: Synchronizing with TNC 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1100, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 581.910057][T25496] sp1: Synchronizing with TNC 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2c020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0xc020660b, &(0x7f0000000080)=0x81) 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1200, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60d0}, 0x20044054) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100}, 0x14}}, 0x0) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2d020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0xc0189436, &(0x7f0000000080)=0x81) [ 582.168509][T25511] sp0: Synchronizing with TNC 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60d0}, 0x20044054) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60d0}, 0x20044054) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100}, 0x14}}, 0x0) (async) 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x600, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x30030000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x315900, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x20007) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31030000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60d0}, 0x20044054) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000000)={0x0, 0x1a, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x100}, 0x14}}, 0x0) [ 582.383766][T25531] sp0: Synchronizing with TNC 18:23:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x315900, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x20007) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x700, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x600, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2010, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x315900, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x20007) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x315900, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x20007) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:23:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TCFLSH(r0, 0x540b, 0x1) 18:23:58 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:58 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x900, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:58 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x48000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:23:59 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2c02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:59 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 582.884563][T25576] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 582.934229][T25576] CPU: 0 PID: 25576 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 582.938864][T25577] sp0: Synchronizing with TNC [ 582.943200][T25576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 582.943217][T25576] Call Trace: [ 582.943225][T25576] [ 582.943234][T25576] dump_stack_lvl+0x201/0x2d8 [ 582.968790][T25576] ? show_regs_print_info+0x12/0x12 [ 582.973983][T25576] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 582.979718][T25576] sysfs_create_dir_ns+0x2c4/0x390 [ 582.984823][T25576] ? sysfs_warn_dup+0xa0/0xa0 [ 582.989487][T25576] ? do_raw_spin_unlock+0x134/0x8a0 [ 582.994678][T25576] kobject_add_internal+0x418/0xb50 [ 582.999876][T25576] kobject_add+0x14c/0x210 [ 583.004288][T25576] ? kobject_init+0x1d0/0x1d0 [ 583.008952][T25576] ? get_device_parent+0x2cd/0x430 [ 583.014056][T25576] device_add+0x523/0x16d0 [ 583.018467][T25576] ? virtual_device_parent+0x50/0x50 [ 583.023757][T25576] ? memcpy+0x3c/0x60 [ 583.027738][T25576] device_create+0x252/0x2e0 [ 583.032329][T25576] ? vsnprintf+0x18e/0x1d40 [ 583.036823][T25576] ? root_device_unregister+0x100/0x100 [ 583.042366][T25576] ? __percpu_counter_init+0x1fd/0x230 [ 583.047814][T25576] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 583.054137][T25576] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 583.060530][T25576] bdi_register_va+0x86/0x530 [ 583.065201][T25576] super_setup_bdi_name+0xe0/0x1f0 [ 583.070300][T25576] ? __lock_acquire+0x2b00/0x2b00 [ 583.075452][T25576] ? vfs_get_tree+0x270/0x270 [ 583.080120][T25576] ? do_raw_spin_unlock+0x134/0x8a0 [ 583.085313][T25576] fuse_fill_super_common+0x6e1/0x11a0 [ 583.090765][T25576] ? fuse_init_fs_context_submount+0x40/0x40 [ 583.096787][T25576] ? snprintf+0xd6/0x120 [ 583.101020][T25576] ? vscnprintf+0x80/0x80 [ 583.105336][T25576] ? set_blocksize+0x1d5/0x360 [ 583.110101][T25576] fuse_fill_super+0x170/0x1e0 [ 583.114857][T25576] get_tree_bdev+0x406/0x630 [ 583.119449][T25576] ? fuse_reconfigure+0xb0/0xb0 [ 583.124288][T25576] fuse_get_tree+0x31c/0x4a0 [ 583.128876][T25576] vfs_get_tree+0x86/0x270 [ 583.133277][T25576] path_mount+0x1986/0x2c30 [ 583.137782][T25576] ? slab_free_freelist_hook+0x12e/0x1a0 [ 583.143403][T25576] ? mark_mounts_for_expiry+0x520/0x520 [ 583.148931][T25576] ? user_path_at_empty+0x149/0x1a0 [ 583.154117][T25576] ? kmem_cache_free+0xb6/0x1c0 [ 583.158965][T25576] ? user_path_at_empty+0x149/0x1a0 [ 583.164157][T25576] __se_sys_mount+0x308/0x3c0 [ 583.168910][T25576] ? vtime_user_exit+0x2b2/0x3e0 [ 583.173837][T25576] ? __x64_sys_mount+0xc0/0xc0 [ 583.178593][T25576] ? lockdep_hardirqs_on+0x95/0x140 [ 583.183785][T25576] ? __x64_sys_mount+0x1c/0xc0 [ 583.188540][T25576] do_syscall_64+0x44/0xd0 [ 583.192950][T25576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 583.198833][T25576] RIP: 0033:0x7fe68358f059 [ 583.203231][T25576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 583.222869][T25576] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 18:23:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) (async) [ 583.231272][T25576] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 [ 583.239227][T25576] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 583.247185][T25576] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 [ 583.255146][T25576] R10: 0000000000000900 R11: 0000000000000246 R12: 0000000000000000 [ 583.263112][T25576] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 583.271085][T25576] 18:23:59 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2d02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:23:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) 18:23:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:23:59 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3003, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 583.665714][T25592] sp0: Synchronizing with TNC 18:23:59 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:23:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) ioctl$TCFLSH(r0, 0x540b, 0x1) 18:24:00 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3103, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 583.974711][T25603] sp0: Synchronizing with TNC [ 584.230854][T25576] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:24:00 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x0, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x74}, 0x1, 0x0, 0x0, 0x8050}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:24:00 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x105403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffeaa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="050700000000000000000000000005255e29a4cbd20e702bed4ec59b3f5f32000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"2a1cf83221b21584133e101d92893391", 0x0, 0x0, {0x4, 0x1}, {0x3f, 0x400}, 0xffffffff, [0x10001, 0x43, 0x7, 0x200040000, 0x19, 0x3, 0x7, 0x6, 0x100000000, 0x2, 0x8001, 0x1, 0x1, 0x4addd5fa, 0x45af, 0x10001]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000200)={{r2}, r5, 0x1c, @unused=[0x6, 0x3f, 0x6, 0x5], @name="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"}) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) syz_open_pts(r6, 0x480102) 18:24:00 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:00 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x115, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 584.272120][T25581] loop0: Can't mount, would change RO state 18:24:00 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffff8e0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:24:00 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:00 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x105403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffeaa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="050700000000000000000000000005255e29a4cbd20e702bed4ec59b3f5f32000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"2a1cf83221b21584133e101d92893391", 0x0, 0x0, {0x4, 0x1}, {0x3f, 0x400}, 0xffffffff, [0x10001, 0x43, 0x7, 0x200040000, 0x19, 0x3, 0x7, 0x6, 0x100000000, 0x2, 0x8001, 0x1, 0x1, 0x4addd5fa, 0x45af, 0x10001]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000200)={{r2}, r5, 0x1c, @unused=[0x6, 0x3f, 0x6, 0x5], @name="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"}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) syz_open_pts(r6, 0x480102) [ 584.484248][T25620] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 584.523765][T25620] CPU: 1 PID: 25620 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 584.532571][T25620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.542638][T25620] Call Trace: [ 584.545928][T25620] [ 584.548866][T25620] dump_stack_lvl+0x201/0x2d8 [ 584.553554][T25620] ? show_regs_print_info+0x12/0x12 [ 584.558740][T25620] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 584.564469][T25620] sysfs_create_dir_ns+0x2c4/0x390 [ 584.569570][T25620] ? sysfs_warn_dup+0xa0/0xa0 [ 584.574259][T25620] ? do_raw_spin_unlock+0x134/0x8a0 [ 584.579456][T25620] kobject_add_internal+0x418/0xb50 [ 584.584659][T25620] kobject_add+0x14c/0x210 [ 584.589092][T25620] ? kobject_init+0x1d0/0x1d0 [ 584.593800][T25620] ? get_device_parent+0x2cd/0x430 [ 584.598909][T25620] device_add+0x523/0x16d0 [ 584.603347][T25620] ? virtual_device_parent+0x50/0x50 [ 584.608635][T25620] ? memcpy+0x3c/0x60 [ 584.612975][T25620] device_create+0x252/0x2e0 [ 584.617565][T25620] ? vsnprintf+0x18e/0x1d40 [ 584.622064][T25620] ? root_device_unregister+0x100/0x100 [ 584.627605][T25620] ? __percpu_counter_init+0x1fd/0x230 [ 584.633054][T25620] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 584.639373][T25620] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 584.645692][T25620] bdi_register_va+0x86/0x530 [ 584.650369][T25620] super_setup_bdi_name+0xe0/0x1f0 [ 584.655479][T25620] ? __lock_acquire+0x2b00/0x2b00 [ 584.660762][T25620] ? vfs_get_tree+0x270/0x270 [ 584.665443][T25620] ? do_raw_spin_unlock+0x134/0x8a0 [ 584.670648][T25620] fuse_fill_super_common+0x6e1/0x11a0 [ 584.676113][T25620] ? fuse_init_fs_context_submount+0x40/0x40 [ 584.682090][T25620] ? snprintf+0xd6/0x120 [ 584.686331][T25620] ? vscnprintf+0x80/0x80 [ 584.690656][T25620] ? set_blocksize+0x1d5/0x360 [ 584.695422][T25620] fuse_fill_super+0x170/0x1e0 [ 584.700184][T25620] get_tree_bdev+0x406/0x630 [ 584.704778][T25620] ? fuse_reconfigure+0xb0/0xb0 [ 584.709629][T25620] fuse_get_tree+0x31c/0x4a0 [ 584.714215][T25620] vfs_get_tree+0x86/0x270 [ 584.718626][T25620] path_mount+0x1986/0x2c30 [ 584.723127][T25620] ? slab_free_freelist_hook+0x12e/0x1a0 [ 584.728754][T25620] ? mark_mounts_for_expiry+0x520/0x520 [ 584.734297][T25620] ? user_path_at_empty+0x149/0x1a0 [ 584.739486][T25620] ? kmem_cache_free+0xb6/0x1c0 [ 584.744333][T25620] ? user_path_at_empty+0x149/0x1a0 [ 584.749524][T25620] __se_sys_mount+0x308/0x3c0 [ 584.754194][T25620] ? vtime_user_exit+0x2b2/0x3e0 [ 584.759133][T25620] ? __x64_sys_mount+0xc0/0xc0 [ 584.763893][T25620] ? lockdep_hardirqs_on+0x95/0x140 [ 584.769094][T25620] ? __x64_sys_mount+0x1c/0xc0 [ 584.773857][T25620] do_syscall_64+0x44/0xd0 [ 584.778268][T25620] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 584.784294][T25620] RIP: 0033:0x7fc3cea2f059 [ 584.788717][T25620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 584.808330][T25620] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 584.816743][T25620] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 584.824709][T25620] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 18:24:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffff8e0) (async, rerun: 64) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) (rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 584.832672][T25620] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 584.840633][T25620] R10: 0000000000000115 R11: 0000000000000246 R12: 0000000000000000 [ 584.848808][T25620] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 584.856890][T25620] 18:24:01 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x105403, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async, rerun: 64) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async, rerun: 64) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) getsockname$packet(r1, &(0x7f0000001200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffeaa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="050700000000000000000000000005255e29a4cbd20e702bed4ec59b3f5f32000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000100)={"2a1cf83221b21584133e101d92893391", 0x0, 0x0, {0x4, 0x1}, {0x3f, 0x400}, 0xffffffff, [0x10001, 0x43, 0x7, 0x200040000, 0x19, 0x3, 0x7, 0x6, 0x100000000, 0x2, 0x8001, 0x1, 0x1, 0x4addd5fa, 0x45af, 0x10001]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000200)={{r2}, r5, 0x1c, @unused=[0x6, 0x3f, 0x6, 0x5], @name="ef7260bbd2757e13e80bbe220853a361e792cfe5fdf6167020dd321995184112effaa2f6f236b822dfbb2bee60afb7f42f8dc3e6be31a71306c687a03bf73c35423c6a8b8a5ef594187ded8fd314744ebc77cf964dbf7b56688d1f6336db443c4bed83440f59e1568d6e709e9f89466b0f415750f75575d0ca0f7a6e2bccce610026c00745bf3e3d19af96ffc446f9fd4ee78339c183f992d85f886ab6897c09d6cb647b71b4181053d6764886ceb97c2db148c9444c650cb2ddac2786dc865e9ec64427573cf56fda22afc00f02940ebe1ff6f21f69f513fdbcc3d98b1bb35d33143d15394668d5399ad16c6745a60e48748b020dd17b43c76cbb20e1dc85237e8d88993e26b14dd6fc16feb558781d2fa648d03e5211b55439cc9c54d0c0da58c4021c85d477bed8384a19e50bcc7f4c2a6161868a0d08b3fff108d9a96ed0c87d4f622cb9d925d8b5c6647f61c85a5b0e1d36511cb30140d1fde17e0b2c2095a49fa43704eb2658e7f424b0ef77b759bd1d5642599f62cdd1c484271639297e2a9a58cdf1496dc581a7271c5a5a799bf9a524d4c3d0a091b6cabf98eb1904da2819cd2351a947dd22369f98e0a5743bf77e7a0084f2292ee65fa9dade12448ce803aa563fa01c62894daf816015b6775b7ec3d5da81ddf7ceef0c833fe7a9f2fcb1cffb7a1bf0cc3f1d70fa16c3a5a9762259df6baefbe9fcb9bcd144dd748e19e59529832939948c4bcfa4bd032e758c89ac7b93073c60f8502693ddce8b8ccd05fa5ea71cc6826948570fca087e56c1894f3b03ee40e9cecb356b01c67a917a7304185d8cf93316d2bfbd6db883045732c89168c345fb0a8bce8597a5b8ccbcc9efaccf309c0cfff40634226c13b3648a9d9a4e750b048a01893cf20266b1fbb3108dfb7b7e1df9c02434de0a68b74210598974044f334c21e31f598f9db506842f83c958e81e7e459ed40d39d67ba9be678d9fa811d4fd856c7add1df061bf3c8ed3e1db80979e84ff32214a2186e438fb00cc106a2cdcf7797b4fc116dd3763c48214179a8c8dceb3527c3c359176357353f40cf34f55aad3fa762099710ef2930df87b02d15f443f8a8bc00a26d6e22ae18f8fdb1640b4d1ac2a1ca2f4b9b3e1e87002e25f10b9602827ec8daa83c0246454bb1a824543d473c2273c9293d6c396a3d828dabb3a327b120f0eef1c7d80d694a15466ee36b39b429136118cf070ee43b69a4211084026feb5d45e158c0742bd8584d5d89b49d6f5fcc5d7b5811071110d4d444ea3e69508714f90125d3a9a9a032f7e0f0199cea3aed2e506a43c12639add05f9b1a044e7b4eaabd33cd54b37ca98ba1b5fc4a9002dce7b1b4df66b79c600f8c921365cf19476ae7e167ee77243a8525c23ac166b4ac84c203c06ed4a39d5ebd30413d3d6c95d10825c378753b5a850574d679e6c80165eab4459c5fc3cea1585f442b49fea5b91ef88f2180022aae931091e1d9ccf4cf32981396981abf16564f03532c1e193fe727d89bb6a4dfab04f1c3ca010d1de8a5c53bb9e7f448859a0b63deb3768d1b2b4ecb62e459fc22494770b7658869e28d5b2a604ffcd35e0b1bddb719f7106c39b396b03f680169392389c1ef58941a16410ebaf5f8308ee1e30aa13de7452866105bc135f51f61c10840ee85b8302c9041775972693364550cebf078727b22918cf36a5d6a895e890c73638e9a081a675c3e8a57cd3d798ae2194e61514e03306b8e745e085cb8afa525d285f574672618fa37a62f161a11281588a20d3010a5c7ac67bf2996c220cb6236d62737f6495b2df00e03cd32796f52174d843fcc01c13d2f96d0e11e79bf26e1fd2904c1bcd7d5cd4f481b9496e313b4067be56312c2582067aecd7ce5cdd6b85f4d8bfcb6236009ed304da887f026fb8dd456355bfcfa6b0ab7293dd0474b1b40bd1d9dfa448faafaa47712168d302963763ac750bff943593dbe476948369068d4265c0777c22dc06d9df274cf360c30a8234c4618974406a79064e31f3a46d3a1b07e65d249b60eb882cb25643ff21f76a731f4684ed0a387bf9247c046a0298bd393f1a88be7a5b71eaa7f0d1ee35edbefe96337d05a62b00a9b033f8f88ae3daec96b41729f9522ec9192ee0e8659aaee859cf9c293d7d927070a3ab4ffc38f3b908af998d2915cf9f65d3adfb0b214d1f52a06bfe17cb78f6ef875b9e21a2a6bf170d137f4bc06e06da08d14f5fb4483ecb314c64cf179dd3166d1a47a78a300b776d3212cc3f50d7abd370b0424f52e8412799be53537c5431d5e6a1db39f4a30e991995a3ec968819d24628509f6763c8689761fad15431a22b87f19f668457d6f6446816e185404866c9b62be72141d73d01388c2a00892f4389937095e90c90171d28f384f2d3a6056fdedbd50bcdbbd31352e0ffaeacc02962ba58a7969248d1ed89edd86e5babe2577509739e81d479868cb4fb71047de08df0e3bf2e5f63a71f2c642933eec7e0de0bd7fe36614d9b702a894b494ada9e3dc843e89d78ec70453350d1b4d7c03f63b2d623eb1dd1d8e63e63d2abb72f2d0ae5e4aca2f4941589107aeaa310a5111c41b43582d9c5d0f45960d08bf9012c66faaeb7fabba05ad4c6c7c0783fe597c5a4687b8c3a67f133ad0466ac72e361f6dd13b6ceb67ef4079a9e8f27a3eb26f65a791e36b4c0216b1302b1fe7d230c4066fae0eb823046c46b557b8a9d9fd467c8595ebdb583fb794ae302b9539c25d24faa04a7eca30e3d9f0b9004880932b24170b6f83ecc60beced36518d0d71bb623eaacafeb7204cdc2fc2871d015942bf9f1bc540b9d4765231cc8bce4ef2f4c5d024cd95ef8519b62938dda9951714150fb65f3f3c1ec1b5f96de30811fbb854b45f2051cbe7136d1161177fba11d9d5ec0ae5bbcbe715e506ccbcbd953c5a9654b945c2a375a966199d4bc53a8011b3fd2a2aa3927111b303b7a9353449d09a6258f22188edcfaeeac8e9aa527e115cb955d9f538a3c8411445a31e9e291e6c1dd5b3595ea007e5dc2d3051245915c02ff60d62157e9f21e661786162a46c518fc20de4dc1d4a1b6d371b8d886f55ba01a431fb6b47dab9382f24ea00ab91b0e5289693423b50e458a33d964260cd6159efdede9133ccc91f387e5355eefd38e7b655a07d8e6f662ba6aee32a21e4306c2520f78530965c793515914fb9d86cb6075132b02e2b07c04a108044bb9e57745238db19cf98a288d931709ddda05b1e6e472840bdf140ee489b1d7868f99602151c0c1efd1c316d1c4be382504d7f6065740a48eacfa4b28da2777bbab3ab3d9ea1531a4bde64a5c0bd93a3335f2fefe01020ee0473e805a6f695b3422a8e0a55bf06fb3fe078339f5d9744365aa59b432d58bc4d070d5e3f931f1284544bde5c878076dd03fe22f6e8b353f507641aea2546a36e0fa6c0909282b2746887a4e7ffaa31eb62d01875e6ab905ecf0095715fec01088447254fb313438d05d838adfc4d026566212ab36a5bdc61deae9cb6cb36bdd1bd76b211a2bd15c54494dadb1191b2944f9f913b8e7113ee2843ee7aed440be1775ba421eeef8e86265df291d2b96277b2d937ebef5a52a1e09907cec1030bfda9996b8911c203b901c7668de233fe5caade774fd5989f23cb2840dd13c32c6bd94c03e4294d3cd51fdc8b25b62deebf3cf1713e4bf16a607083dffb2480e833f207ad836a42aac7486ed64f2f5c4fafba7d55e8af08916b96deed3ab78afe0eacf1e95b1f17b91e1c46a0710ef94fd2220dca1aed285b7d2ab8f5242f3b0610331d8b7ecc134365b8f49e459db7c7c521136e79c5d6cc830edad097098888018a4da902103919b1ab88567f76889fc959a89cc85e514c61f923bdfbf74aed1a4b325e6b049eb4e231fea49a18d0a54cf3a3e82a7315617226d466e8bffdaf0cafbcc6acc916e0699839f81076488be69abf7ad91bff9b10371b86992514e4b35c1b7c757221cb20133a78d69d5246d8c6b8d1e9ec77a0f0f1e97dbc3e6fc25db2c6852622ffba7364375d61c49903c2b84281197569070531c5e3ec58665c09b6fd3b81ce90bd08c7f4e618c63e5070e67ae0eef408104b1266cd2d77601a30e0a8c5e10627718b01a8f40936d6881a400a0e354ea167f69d7cac248b47d40f76d48b7c8258e31f18585796774976d484e8de39126f469295a8e4be667bcc3bbd26ba551f7928e71119308fae04c87889cdecf6a9647f745736db83d822c5a6d6a7d82fe770d5a0adc770457c7e27e1087e39372e6893bc564ce8c9e0cc4eb4f3c4347aad3589d9f9cbbc5692f1d901dcb822bd485965af6a3dab480c7751103dcfff3dec6f7c90f87fb972d6377a5ae476cee6c15e9399ceaff1441d4b33f44f78da8496f24cf595dcc48f4de0f401ed43f2139746dde2c742a23ab5d07a7b2e6c74600903ef2d632457b695cade1ed2fee91aec11329d91cfb3a71bd23bfa1a420402a107c1120278e4bf6165bcb50f67f89b89954b4cb3427607cc6332515653ee37727b7677d3289252426a071100e812c76dfcc96392f8437c276f8d78ec226c488bbd268f016bf8041ab61b86b9031f596da0e4cfc5fe43e81a9c03657a6328fc1e52828bbb07a7ea8d2804f7a4a0c2c55842ee005992ebaf70728e6b0e93fcf55a61ce4cb0f4827681a8917fc8524dfa5179b898a4ca62c5df1af3535f85ba42e6620b0137c0bd11d0ac40aab8ca984d8f28c165c4b66bb0cdb341c58d42d1d3758640c598734a1a24c298279827a34d99f87463c9fcc5748cfced93ceb3e0bb2a87a0761ccf63288341b7152aa935906f94242648e9bd7cdb8a7e2a2a5f646b4ca73155c81aa6510952aaf2b2ec2bf08a51f8c30b8035131f23c37f7b848e1b8b4418af7400b44aa0c035faa3d77d63907980a83db704fab8ae63ce1e4c79d1581b058158891119ba77e063f3dd016050ac0848e5de996f7424e6fc3f7ef41580df3be668c9f78ace92a6536f8898679d76591ff8572c233251377bcc201d451e3b520658a13962e8f7571343ecdd0f54910463f5a5b2f8e25de44e9682a75d738a60c9a1d55a10ca97938d213c8c53a765d6624803448544a643175290fa8fce64c96f3d44fbe82ee5a45a43c689f03c1932a702713d2ad673778bfbcca2508313c26e2f86435866560eca4be161391480271ab3c8177f9fd451f4d529d721ffdc352ca6025c93a455d56290f93635b9d0410005c95eb39c3d56fa7b9d70b2e2c7578e9fc00f73040335b0b37da815526926eff2264b6a1b1b4b5467184776778fa6e3dc857daab596bd46bcf76755e29ab8a7511c303cebf671faa5f7dfb26811ce1ac1da8dfad530e9f654280a8dbacc1bef38eed1c3edf0f40cb75db01ae313ee2c389ab97e9d39723863def78b41e7aef50eac2d60d266604345b02558cc8b1005cfedb9cdaefdd49d51b5ec150e584a36c7f5cd64acde0d1df04a389ab629e18179effdc1ad499de7b8255652c2ac65230228e46c6abd40b2ee40bbd4620a55f39b94e7bed377e34fee39c703ca3bac7738925c226369b95e400624579b2f916edb60d9e81be08f1acf6d77665ac13209d311b31a56f62b62b572dcbbbbfaa5d9734fd373763464ff221edb0abb572b218b55449c6ff196f464a438c29d02df33af554ecebbd22075fd9cb8a71a9bb5efcd9a02593533b0e7962152a40d13e"}) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80) syz_open_pts(r6, 0x480102) 18:24:01 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffff8e0) (async) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="17d6da3d6171c52bef04bc68f6a33b83557a533e71594967c326db8755043fd021cccf3a0bbd32c8d45f919e6b8a8faf99bad6dccd4f0465fe83cf06286195d18a54b439cc3b3a9ebd8216b0a33db6b6f6fcd8e49c63c7ad8285c4b793732164c04e59d24760dddca3edc2f6a71bfa518d09dba01f23fe101ebdaa86ea8c213f47e03feaa045b97e2e36d2d63b7e25a7e7151eb7881dd067dbf31c78e3b619d6310462b84fddab0cdd286b6edae38eb776c86b8eec7a4228aeeab863b7ac911db15ca76f1d788e11801a82ec5eda12c2488d149e91741f00fdd8ad16f5e96d12ddd20eececa6696d847677aa95cfd32e9835a7f65d36741f1a84e17534235d6d88c747a2f9ef40448190f21503acb652fcb3c993b76777f530e83de6f6e77dad0ae63b9050b128d669a55a4332cc25f531e1417777acb1ded1253713d6c03b", @ANYRES16=r3, @ANYRESHEX=r4], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 18:24:01 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x64000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 585.023612][T25620] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 585.044986][T25629] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 585.083887][T25629] CPU: 1 PID: 25629 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 585.092704][T25629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.102777][T25629] Call Trace: [ 585.106054][T25629] [ 585.108992][T25629] dump_stack_lvl+0x201/0x2d8 [ 585.113684][T25629] ? show_regs_print_info+0x12/0x12 [ 585.118877][T25629] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 585.124594][T25629] sysfs_create_dir_ns+0x2c4/0x390 [ 585.129705][T25629] ? sysfs_warn_dup+0xa0/0xa0 [ 585.134387][T25629] ? do_raw_spin_unlock+0x134/0x8a0 [ 585.139593][T25629] kobject_add_internal+0x418/0xb50 [ 585.144794][T25629] kobject_add+0x14c/0x210 [ 585.149204][T25629] ? kobject_init+0x1d0/0x1d0 [ 585.153880][T25629] ? get_device_parent+0x2cd/0x430 [ 585.158986][T25629] device_add+0x523/0x16d0 [ 585.163404][T25629] ? virtual_device_parent+0x50/0x50 [ 585.168680][T25629] ? memcpy+0x3c/0x60 [ 585.172865][T25629] device_create+0x252/0x2e0 [ 585.177455][T25629] ? vsnprintf+0x18e/0x1d40 [ 585.181957][T25629] ? root_device_unregister+0x100/0x100 [ 585.187500][T25629] ? __percpu_counter_init+0x1fd/0x230 [ 585.192959][T25629] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 585.199285][T25629] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 585.205614][T25629] bdi_register_va+0x86/0x530 [ 585.210290][T25629] super_setup_bdi_name+0xe0/0x1f0 [ 585.215396][T25629] ? __lock_acquire+0x2b00/0x2b00 [ 585.220417][T25629] ? vfs_get_tree+0x270/0x270 [ 585.225090][T25629] ? do_raw_spin_unlock+0x134/0x8a0 [ 585.230284][T25629] fuse_fill_super_common+0x6e1/0x11a0 [ 585.235744][T25629] ? fuse_init_fs_context_submount+0x40/0x40 [ 585.241719][T25629] ? snprintf+0xd6/0x120 [ 585.245957][T25629] ? vscnprintf+0x80/0x80 [ 585.250294][T25629] ? set_blocksize+0x1d5/0x360 [ 585.255072][T25629] fuse_fill_super+0x170/0x1e0 [ 585.259832][T25629] get_tree_bdev+0x406/0x630 [ 585.264428][T25629] ? fuse_reconfigure+0xb0/0xb0 [ 585.269269][T25629] fuse_get_tree+0x31c/0x4a0 [ 585.273855][T25629] vfs_get_tree+0x86/0x270 [ 585.278261][T25629] path_mount+0x1986/0x2c30 [ 585.282762][T25629] ? slab_free_freelist_hook+0x12e/0x1a0 [ 585.288384][T25629] ? mark_mounts_for_expiry+0x520/0x520 [ 585.293921][T25629] ? user_path_at_empty+0x149/0x1a0 [ 585.299108][T25629] ? kmem_cache_free+0xb6/0x1c0 [ 585.303955][T25629] ? user_path_at_empty+0x149/0x1a0 [ 585.309146][T25629] __se_sys_mount+0x308/0x3c0 [ 585.313815][T25629] ? vtime_user_exit+0x2b2/0x3e0 [ 585.318744][T25629] ? __x64_sys_mount+0xc0/0xc0 [ 585.323498][T25629] ? lockdep_hardirqs_on+0x95/0x140 [ 585.328688][T25629] ? __x64_sys_mount+0x1c/0xc0 [ 585.333457][T25629] do_syscall_64+0x44/0xd0 [ 585.337868][T25629] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 585.343751][T25629] RIP: 0033:0x7fd07601f059 [ 585.348159][T25629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 585.367759][T25629] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.376170][T25629] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 585.384160][T25629] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 585.392121][T25629] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 [ 585.400081][T25629] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 585.408039][T25629] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 585.416019][T25629] 18:24:01 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x801}, 0x14}}, 0x0) 18:24:01 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r4) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x801}, 0x14}}, 0x0) 18:24:01 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 585.717215][T25629] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 585.753860][T25647] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 585.762919][T25647] CPU: 0 PID: 25647 Comm: syz-executor.1 Not tainted 5.17.0-rc4-syzkaller #0 [ 585.771700][T25647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 585.781771][T25647] Call Trace: [ 585.785055][T25647] [ 585.788001][T25647] dump_stack_lvl+0x201/0x2d8 [ 585.792670][T25647] ? show_regs_print_info+0x12/0x12 [ 585.797847][T25647] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 585.803559][T25647] sysfs_create_dir_ns+0x2c4/0x390 [ 585.808673][T25647] ? sysfs_warn_dup+0xa0/0xa0 [ 585.813336][T25647] ? do_raw_spin_unlock+0x134/0x8a0 [ 585.818527][T25647] kobject_add_internal+0x418/0xb50 [ 585.823716][T25647] kobject_add+0x14c/0x210 [ 585.828118][T25647] ? kobject_init+0x1d0/0x1d0 [ 585.832784][T25647] ? get_device_parent+0x2cd/0x430 [ 585.837883][T25647] device_add+0x523/0x16d0 [ 585.842321][T25647] ? virtual_device_parent+0x50/0x50 [ 585.847586][T25647] ? memcpy+0x3c/0x60 [ 585.851574][T25647] device_create+0x252/0x2e0 [ 585.856153][T25647] ? vsnprintf+0x18e/0x1d40 [ 585.860638][T25647] ? root_device_unregister+0x100/0x100 [ 585.866169][T25647] ? __percpu_counter_init+0x1fd/0x230 [ 585.871714][T25647] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 585.878051][T25647] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 585.884389][T25647] bdi_register_va+0x86/0x530 [ 585.889063][T25647] super_setup_bdi_name+0xe0/0x1f0 [ 585.894162][T25647] ? __lock_acquire+0x2b00/0x2b00 [ 585.899184][T25647] ? vfs_get_tree+0x270/0x270 [ 585.903844][T25647] ? do_raw_spin_unlock+0x134/0x8a0 [ 585.909026][T25647] fuse_fill_super_common+0x6e1/0x11a0 [ 585.914475][T25647] ? fuse_init_fs_context_submount+0x40/0x40 [ 585.920437][T25647] ? snprintf+0xd6/0x120 [ 585.924772][T25647] ? vscnprintf+0x80/0x80 [ 585.929087][T25647] ? set_blocksize+0x1d5/0x360 [ 585.933837][T25647] fuse_fill_super+0x170/0x1e0 [ 585.938591][T25647] get_tree_bdev+0x406/0x630 [ 585.943166][T25647] ? fuse_reconfigure+0xb0/0xb0 [ 585.948002][T25647] fuse_get_tree+0x31c/0x4a0 [ 585.952576][T25647] vfs_get_tree+0x86/0x270 [ 585.956975][T25647] path_mount+0x1986/0x2c30 [ 585.961474][T25647] ? slab_free_freelist_hook+0x12e/0x1a0 [ 585.967101][T25647] ? mark_mounts_for_expiry+0x520/0x520 [ 585.972627][T25647] ? user_path_at_empty+0x149/0x1a0 [ 585.977805][T25647] ? kmem_cache_free+0xb6/0x1c0 [ 585.982639][T25647] ? user_path_at_empty+0x149/0x1a0 [ 585.987817][T25647] __se_sys_mount+0x308/0x3c0 [ 585.992478][T25647] ? vtime_user_exit+0x2b2/0x3e0 [ 585.997498][T25647] ? __x64_sys_mount+0xc0/0xc0 [ 586.002252][T25647] ? lockdep_hardirqs_on+0x95/0x140 [ 586.007434][T25647] ? __x64_sys_mount+0x1c/0xc0 [ 586.012190][T25647] do_syscall_64+0x44/0xd0 [ 586.016605][T25647] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 586.022483][T25647] RIP: 0033:0x7f861f8b2059 [ 586.026887][T25647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.046493][T25647] RSP: 002b:00007f861e227168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 586.054900][T25647] RAX: ffffffffffffffda RBX: 00007f861f9c4f60 RCX: 00007f861f8b2059 [ 586.062864][T25647] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 586.070819][T25647] RBP: 00007f861f90c08d R08: 00000000200001c0 R09: 0000000000000000 [ 586.078783][T25647] R10: 0000000064000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.086737][T25647] R13: 00007fffc731a99f R14: 00007f861e227300 R15: 0000000000022000 [ 586.094715][T25647] [ 586.100933][T25647] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 586.122505][T25663] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 586.133020][T25663] CPU: 0 PID: 25663 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 586.141803][T25663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.151869][T25663] Call Trace: [ 586.155142][T25663] [ 586.158065][T25663] dump_stack_lvl+0x201/0x2d8 [ 586.162756][T25663] ? show_regs_print_info+0x12/0x12 [ 586.167940][T25663] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 586.173656][T25663] sysfs_create_dir_ns+0x2c4/0x390 [ 586.178760][T25663] ? sysfs_warn_dup+0xa0/0xa0 [ 586.183444][T25663] ? do_raw_spin_unlock+0x134/0x8a0 [ 586.188638][T25663] kobject_add_internal+0x418/0xb50 [ 586.193832][T25663] kobject_add+0x14c/0x210 [ 586.198237][T25663] ? kobject_init+0x1d0/0x1d0 [ 586.202926][T25663] ? get_device_parent+0x2cd/0x430 [ 586.208048][T25663] device_add+0x523/0x16d0 [ 586.212458][T25663] ? virtual_device_parent+0x50/0x50 [ 586.217728][T25663] ? memcpy+0x3c/0x60 [ 586.221722][T25663] device_create+0x252/0x2e0 [ 586.226319][T25663] ? vsnprintf+0x18e/0x1d40 [ 586.230845][T25663] ? root_device_unregister+0x100/0x100 [ 586.236411][T25663] ? __percpu_counter_init+0x1fd/0x230 [ 586.241887][T25663] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 586.248238][T25663] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 586.254559][T25663] bdi_register_va+0x86/0x530 [ 586.259246][T25663] super_setup_bdi_name+0xe0/0x1f0 [ 586.264346][T25663] ? __lock_acquire+0x2b00/0x2b00 [ 586.269356][T25663] ? vfs_get_tree+0x270/0x270 [ 586.274019][T25663] ? do_raw_spin_unlock+0x134/0x8a0 [ 586.279212][T25663] fuse_fill_super_common+0x6e1/0x11a0 [ 586.284673][T25663] ? fuse_init_fs_context_submount+0x40/0x40 [ 586.290641][T25663] ? snprintf+0xd6/0x120 [ 586.294876][T25663] ? vscnprintf+0x80/0x80 [ 586.299196][T25663] ? set_blocksize+0x1d5/0x360 [ 586.303956][T25663] fuse_fill_super+0x170/0x1e0 [ 586.308715][T25663] get_tree_bdev+0x406/0x630 [ 586.313308][T25663] ? fuse_reconfigure+0xb0/0xb0 [ 586.318169][T25663] fuse_get_tree+0x31c/0x4a0 [ 586.322746][T25663] vfs_get_tree+0x86/0x270 [ 586.327150][T25663] path_mount+0x1986/0x2c30 [ 586.331645][T25663] ? slab_free_freelist_hook+0x12e/0x1a0 [ 586.337264][T25663] ? mark_mounts_for_expiry+0x520/0x520 [ 586.342800][T25663] ? user_path_at_empty+0x149/0x1a0 [ 586.347979][T25663] ? kmem_cache_free+0xb6/0x1c0 [ 586.352814][T25663] ? user_path_at_empty+0x149/0x1a0 [ 586.358000][T25663] __se_sys_mount+0x308/0x3c0 [ 586.362670][T25663] ? vtime_user_exit+0x2b2/0x3e0 [ 586.367618][T25663] ? __x64_sys_mount+0xc0/0xc0 [ 586.372374][T25663] ? lockdep_hardirqs_on+0x95/0x140 [ 586.377586][T25663] ? __x64_sys_mount+0x1c/0xc0 [ 586.382340][T25663] do_syscall_64+0x44/0xd0 [ 586.386750][T25663] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 586.392640][T25663] RIP: 0033:0x7fc3cea2f059 [ 586.397056][T25663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 586.416645][T25663] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 586.425047][T25663] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 586.433013][T25663] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 586.440985][T25663] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 586.448947][T25663] R10: 0000000003000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.456909][T25663] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 586.464886][T25663] 18:24:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:02 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:24:02 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb93, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:02 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x801}, 0x14}}, 0x0) 18:24:02 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 586.598931][T25663] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:24:02 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:02 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:02 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:02 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:02 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:02 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}}, 0x20044011) 18:24:03 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 586.865357][T25685] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 586.929039][T25685] CPU: 1 PID: 25685 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 586.937842][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.947917][T25685] Call Trace: [ 586.951213][T25685] [ 586.954154][T25685] dump_stack_lvl+0x201/0x2d8 [ 586.958997][T25685] ? show_regs_print_info+0x12/0x12 [ 586.964210][T25685] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 586.969960][T25685] sysfs_create_dir_ns+0x2c4/0x390 [ 586.975068][T25685] ? sysfs_warn_dup+0xa0/0xa0 [ 586.979736][T25685] ? do_raw_spin_unlock+0x134/0x8a0 [ 586.984932][T25685] kobject_add_internal+0x418/0xb50 [ 586.990150][T25685] kobject_add+0x14c/0x210 [ 586.994557][T25685] ? kobject_init+0x1d0/0x1d0 [ 586.999241][T25685] ? get_device_parent+0x2cd/0x430 [ 587.004347][T25685] device_add+0x523/0x16d0 [ 587.008760][T25685] ? virtual_device_parent+0x50/0x50 [ 587.014153][T25685] ? memcpy+0x3c/0x60 [ 587.018157][T25685] device_create+0x252/0x2e0 [ 587.022792][T25685] ? vsnprintf+0x18e/0x1d40 [ 587.027292][T25685] ? root_device_unregister+0x100/0x100 [ 587.032838][T25685] ? __percpu_counter_init+0x1fd/0x230 [ 587.038314][T25685] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 587.044639][T25685] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 587.050984][T25685] bdi_register_va+0x86/0x530 [ 587.055681][T25685] super_setup_bdi_name+0xe0/0x1f0 [ 587.060804][T25685] ? __lock_acquire+0x2b00/0x2b00 [ 587.065842][T25685] ? vfs_get_tree+0x270/0x270 [ 587.070538][T25685] ? do_raw_spin_unlock+0x134/0x8a0 [ 587.075776][T25685] fuse_fill_super_common+0x6e1/0x11a0 [ 587.081357][T25685] ? fuse_init_fs_context_submount+0x40/0x40 [ 587.087364][T25685] ? snprintf+0xd6/0x120 [ 587.091636][T25685] ? vscnprintf+0x80/0x80 [ 587.095979][T25685] ? set_blocksize+0x1d5/0x360 [ 587.100765][T25685] fuse_fill_super+0x170/0x1e0 [ 587.105532][T25685] get_tree_bdev+0x406/0x630 [ 587.110127][T25685] ? fuse_reconfigure+0xb0/0xb0 [ 587.114994][T25685] fuse_get_tree+0x31c/0x4a0 [ 587.119594][T25685] vfs_get_tree+0x86/0x270 [ 587.124013][T25685] path_mount+0x1986/0x2c30 [ 587.128517][T25685] ? slab_free_freelist_hook+0x12e/0x1a0 [ 587.134151][T25685] ? mark_mounts_for_expiry+0x520/0x520 [ 587.139702][T25685] ? user_path_at_empty+0x149/0x1a0 [ 587.144901][T25685] ? kmem_cache_free+0xb6/0x1c0 [ 587.149752][T25685] ? user_path_at_empty+0x149/0x1a0 [ 587.154944][T25685] __se_sys_mount+0x308/0x3c0 [ 587.159617][T25685] ? vtime_user_exit+0x2b2/0x3e0 [ 587.164553][T25685] ? __x64_sys_mount+0xc0/0xc0 [ 587.169332][T25685] ? lockdep_hardirqs_on+0x95/0x140 [ 587.174527][T25685] ? __x64_sys_mount+0x1c/0xc0 [ 587.179287][T25685] do_syscall_64+0x44/0xd0 [ 587.183697][T25685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 587.189583][T25685] RIP: 0033:0x7fe68358f059 [ 587.193991][T25685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 587.213590][T25685] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 587.222007][T25685] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 18:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 587.229971][T25685] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 587.237963][T25685] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 [ 587.245929][T25685] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 587.253892][T25685] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 587.261869][T25685] 18:24:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}}, 0x20044011) 18:24:03 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 587.287894][T25685] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:24:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 587.362650][T25697] sp0: Synchronizing with TNC 18:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:03 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc67, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}}, 0x20044011) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}}, 0x20044011) (async) 18:24:03 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:03 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 587.630683][T25718] sp0: Synchronizing with TNC 18:24:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0x20}, 0x14}}, 0x2) 18:24:03 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:03 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x85ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:03 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0x20}, 0x14}}, 0x2) 18:24:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 587.908667][T25738] sp0: Synchronizing with TNC 18:24:04 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x700, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8cffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0x20}, 0x14}}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r3, 0x20}, 0x14}}, 0x2) (async) 18:24:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x3, 0x3e}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) 18:24:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 588.070945][T25752] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 588.112965][T25752] CPU: 0 PID: 25752 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 588.121771][T25752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.131845][T25752] Call Trace: [ 588.135129][T25752] [ 588.138053][T25752] dump_stack_lvl+0x201/0x2d8 [ 588.142721][T25752] ? show_regs_print_info+0x12/0x12 [ 588.148045][T25752] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 588.153808][T25752] sysfs_create_dir_ns+0x2c4/0x390 [ 588.158939][T25752] ? sysfs_warn_dup+0xa0/0xa0 [ 588.163634][T25752] ? do_raw_spin_unlock+0x134/0x8a0 [ 588.168859][T25752] kobject_add_internal+0x418/0xb50 [ 588.174184][T25752] kobject_add+0x14c/0x210 [ 588.178785][T25752] ? kobject_init+0x1d0/0x1d0 [ 588.183485][T25752] ? get_device_parent+0x2cd/0x430 [ 588.188601][T25752] device_add+0x523/0x16d0 [ 588.193025][T25752] ? virtual_device_parent+0x50/0x50 [ 588.198313][T25752] ? memcpy+0x3c/0x60 [ 588.202331][T25752] device_create+0x252/0x2e0 [ 588.206933][T25752] ? vsnprintf+0x18e/0x1d40 [ 588.211453][T25752] ? root_device_unregister+0x100/0x100 [ 588.217026][T25752] ? __percpu_counter_init+0x1fd/0x230 [ 588.222500][T25752] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 588.228829][T25752] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 588.235155][T25752] bdi_register_va+0x86/0x530 [ 588.239838][T25752] super_setup_bdi_name+0xe0/0x1f0 [ 588.244961][T25752] ? __lock_acquire+0x2b00/0x2b00 [ 588.249996][T25752] ? vfs_get_tree+0x270/0x270 [ 588.254696][T25752] ? do_raw_spin_unlock+0x134/0x8a0 [ 588.259917][T25752] fuse_fill_super_common+0x6e1/0x11a0 [ 588.265376][T25752] ? fuse_init_fs_context_submount+0x40/0x40 [ 588.271362][T25752] ? snprintf+0xd6/0x120 [ 588.275620][T25752] ? vscnprintf+0x80/0x80 [ 588.279944][T25752] ? set_blocksize+0x1d5/0x360 [ 588.284720][T25752] fuse_fill_super+0x170/0x1e0 [ 588.289494][T25752] get_tree_bdev+0x406/0x630 [ 588.294083][T25752] ? fuse_reconfigure+0xb0/0xb0 [ 588.298924][T25752] fuse_get_tree+0x31c/0x4a0 [ 588.303539][T25752] vfs_get_tree+0x86/0x270 [ 588.307976][T25752] path_mount+0x1986/0x2c30 [ 588.312520][T25752] ? slab_free_freelist_hook+0x12e/0x1a0 [ 588.318229][T25752] ? mark_mounts_for_expiry+0x520/0x520 [ 588.323770][T25752] ? user_path_at_empty+0x149/0x1a0 [ 588.328955][T25752] ? kmem_cache_free+0xb6/0x1c0 [ 588.333800][T25752] ? user_path_at_empty+0x149/0x1a0 [ 588.339049][T25752] __se_sys_mount+0x308/0x3c0 [ 588.343716][T25752] ? vtime_user_exit+0x2b2/0x3e0 [ 588.348658][T25752] ? __x64_sys_mount+0xc0/0xc0 [ 588.353413][T25752] ? lockdep_hardirqs_on+0x95/0x140 [ 588.358628][T25752] ? __x64_sys_mount+0x1c/0xc0 [ 588.363386][T25752] do_syscall_64+0x44/0xd0 [ 588.367801][T25752] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 588.373689][T25752] RIP: 0033:0x7fc3cea2f059 [ 588.378113][T25752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 588.397714][T25752] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.406122][T25752] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 18:24:04 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1020, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 588.414107][T25752] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 588.422084][T25752] RBP: 00007fc3cea8908d R08: 00000000200001c0 R09: 0000000000000000 [ 588.430044][T25752] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 588.438003][T25752] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 588.445975][T25752] 18:24:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:04 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1100, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x96020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 588.608279][T25757] sp0: Synchronizing with TNC [ 588.718699][T25752] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:24:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x3, 0x3e}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) 18:24:04 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1200, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:04 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x97ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:04 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x3, 0x3e}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) (async, rerun: 32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) (rerun: 32) 18:24:04 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc0ed0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 588.864567][T25787] sp0: Synchronizing with TNC 18:24:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:05 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1401, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x3, 0x3e}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x3, 0x3, 0x3e}}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 589.035816][T25798] sp0: Synchronizing with TNC [ 589.112532][T25805] sp1: Synchronizing with TNC 18:24:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9602, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:05 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6801, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1501, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x8, 0x7, 0x100, 0x7, 0x17, "db0523c08124cbeeced3329c35ec96c2466a2b"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:05 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 589.427835][T25823] sp0: Synchronizing with TNC 18:24:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:05 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd2010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x801}, 0x14}}, 0x0) 18:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x8, 0x7, 0x100, 0x7, 0x17, "db0523c08124cbeeced3329c35ec96c2466a2b"}) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:05 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1501, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd3010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x801}, 0x14}}, 0x0) (async) 18:24:05 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd201, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 589.742366][T25838] sp0: Synchronizing with TNC 18:24:05 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xdaffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:05 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x4, 0xbbca, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r8, 0x801}, 0x14}}, 0x0) 18:24:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x8, 0x7, 0x100, 0x7, 0x17, "db0523c08124cbeeced3329c35ec96c2466a2b"}) (async, rerun: 32) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (rerun: 32) 18:24:06 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x801}, 0x14}}, 0x0) 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2010, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd301, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xebffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 589.902773][T25859] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 589.977781][T25861] sp0: Synchronizing with TNC [ 589.994967][T25859] nbd: couldn't find device at index 65536 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2500, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xf0ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1cc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb05833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d3127c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34100782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf932}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4164049e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab6b974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9230}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd436ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d17e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797f523}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540d3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b685d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64372833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7baf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba5eab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x335b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aaa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7050}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ab8fb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b522f41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9a896d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121f95d1}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ddbb02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bc8936}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00ff00ec03", @ANYRES16=r2, @ANYBLOB="0108200000000000000001000000"], 0x14}}, 0x20000044) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xedc0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x10, &(0x7f0000000080)=0x81) 18:24:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000002c0)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x1, 0x8001, 0x5000, 0x101, 0xc, "2f7942437bb8f2daf0f5380c06cf5d1aaec73c"}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xbe91) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x1a) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x2c, 0x0, &(0x7f0000000200)="367cde49cda1f0af857230bed75e00e3259543b52ddf0f24fa56b5a0392bae09d5852c0fe8cfb4b3fe38e626"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a40)="e514f5b661595ca7ee1745d8da3fe284e2b00f5de40bd58222208bac24d00ac11f9ec13798eb6ad25766fa48abc57a345308777edeb3e6960637c4cb1de6299f9d3de7f660e385c09daa090a278fddca5c4d2024a571dc1d82818e207109d8985d8390248391b646d17cb726e348d590dbf4e0ae29861bb09d31615fc438287ad65a84e7e1859765fea5cf0f844ba3c5aed63eada7d367c3d3fecc50", 0x9c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x210500, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x8, 0x3, 0xfffffffa) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) syz_open_pts(r3, 0x200) 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3003, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xf6ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1cc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb05833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d3127c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34100782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf932}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4164049e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab6b974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9230}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd436ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d17e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797f523}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540d3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b685d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64372833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7baf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba5eab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x335b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aaa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7050}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ab8fb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b522f41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9a896d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121f95d1}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ddbb02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bc8936}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00ff00ec03", @ANYRES16=r2, @ANYBLOB="0108200000000000000001000000"], 0x14}}, 0x20000044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1cc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb05833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d3127c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34100782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf932}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4164049e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab6b974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9230}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd436ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d17e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797f523}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540d3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b685d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64372833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7baf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba5eab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x335b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aaa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7050}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ab8fb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b522f41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9a896d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121f95d1}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ddbb02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bc8936}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00ff00ec03", @ANYRES16=r2, @ANYBLOB="0108200000000000000001000000"], 0x14}}, 0x20000044) (async) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xff00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000002c0)) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x1, 0x8001, 0x5000, 0x101, 0xc, "2f7942437bb8f2daf0f5380c06cf5d1aaec73c"}) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xbe91) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x1a) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x2c, 0x0, &(0x7f0000000200)="367cde49cda1f0af857230bed75e00e3259543b52ddf0f24fa56b5a0392bae09d5852c0fe8cfb4b3fe38e626"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a40)="e514f5b661595ca7ee1745d8da3fe284e2b00f5de40bd58222208bac24d00ac11f9ec13798eb6ad25766fa48abc57a345308777edeb3e6960637c4cb1de6299f9d3de7f660e385c09daa090a278fddca5c4d2024a571dc1d82818e207109d8985d8390248391b646d17cb726e348d590dbf4e0ae29861bb09d31615fc438287ad65a84e7e1859765fea5cf0f844ba3c5aed63eada7d367c3d3fecc50", 0x9c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x210500, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x8, 0x3, 0xfffffffa) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) syz_open_pts(r3, 0x200) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xf9fdffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 590.344564][T25886] sp0: Synchronizing with TNC 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3103, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1cc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb05833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d3127c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34100782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf932}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4164049e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab6b974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9230}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd436ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d17e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797f523}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540d3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b685d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64372833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7baf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba5eab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x335b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aaa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7050}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ab8fb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b522f41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9a896d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121f95d1}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ddbb02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bc8936}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00ff00ec03", @ANYRES16=r2, @ANYBLOB="0108200000000000000001000000"], 0x14}}, 0x20000044) 18:24:06 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1cc, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x174, 0xc, 0x0, 0x1, [{0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cb05833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x59f2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8089}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65d3127c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34100782}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e6062b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf932}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4164049e}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ab6b974}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9230}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc85}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd436ee7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69d17e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797f523}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x94c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x540d3db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b685d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64372833}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7baf}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ba5eab2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e2d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf71d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x138a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x335b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3d6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed95}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8aaa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7050}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54ab8fb9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2099}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b522f41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c9a896d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121f95d1}]}, {0x4}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x58ddbb02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66bc8936}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40080}, 0x8001) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00ff00ec03", @ANYRES16=r2, @ANYBLOB="0108200000000000000001000000"], 0x14}}, 0x20000044) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfdffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000002c0)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x1, 0x8001, 0x5000, 0x101, 0xc, "2f7942437bb8f2daf0f5380c06cf5d1aaec73c"}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xbe91) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x1a) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x2c, 0x0, &(0x7f0000000200)="367cde49cda1f0af857230bed75e00e3259543b52ddf0f24fa56b5a0392bae09d5852c0fe8cfb4b3fe38e626"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a40)="e514f5b661595ca7ee1745d8da3fe284e2b00f5de40bd58222208bac24d00ac11f9ec13798eb6ad25766fa48abc57a345308777edeb3e6960637c4cb1de6299f9d3de7f660e385c09daa090a278fddca5c4d2024a571dc1d82818e207109d8985d8390248391b646d17cb726e348d590dbf4e0ae29861bb09d31615fc438287ad65a84e7e1859765fea5cf0f844ba3c5aed63eada7d367c3d3fecc50", 0x9c) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x210500, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x8, 0x3, 0xfffffffa) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) syz_open_pts(r3, 0x200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x10081, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r1}, 0x8) (async) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000002c0)) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) (async) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x1, 0x8001, 0x5000, 0x101, 0xc, "2f7942437bb8f2daf0f5380c06cf5d1aaec73c"}) (async) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xbe91) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0x1a) (async) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=[@dead_binder_done], 0x2c, 0x0, &(0x7f0000000200)="367cde49cda1f0af857230bed75e00e3259543b52ddf0f24fa56b5a0392bae09d5852c0fe8cfb4b3fe38e626"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1d) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000a40)="e514f5b661595ca7ee1745d8da3fe284e2b00f5de40bd58222208bac24d00ac11f9ec13798eb6ad25766fa48abc57a345308777edeb3e6960637c4cb1de6299f9d3de7f660e385c09daa090a278fddca5c4d2024a571dc1d82818e207109d8985d8390248391b646d17cb726e348d590dbf4e0ae29861bb09d31615fc438287ad65a84e7e1859765fea5cf0f844ba3c5aed63eada7d367c3d3fecc50", 0x9c) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x210500, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f0000000440)=""/115, 0x73}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/228, 0xe4}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/161, 0xa1}], 0x8, 0x3, 0xfffffffa) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) syz_open_pts(r3, 0x200) (async) 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfeffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x296, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xff000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:06 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x8000, 0x80000000, 0x7, 0x3, 0xe, "79d95f26ec2a852eac13f1466f774b1a66f043"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f766373612300202f6465762f7a65726f00205b202f6465762f7a65726f00202325320d20282524205d5d275c2f402c26205c205c250a29d19733ac58bbdebbd9be1fd6656b6d6c4144f9dba00dad4ef5df7db95c3471e22e66d191b115b73848162a487759624b80a228b5d63f065b95ad98a222ed922def3ed6fb1b7856"], 0x8e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000100), 0xfa6, 0x583880) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xfffffffffffff8e0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000040)) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1fffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffff1f00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 590.943938][T25943] sp0: Synchronizing with TNC 18:24:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x296, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x8000, 0x80000000, 0x7, 0x3, 0xe, "79d95f26ec2a852eac13f1466f774b1a66f043"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f766373612300202f6465762f7a65726f00205b202f6465762f7a65726f00202325320d20282524205d5d275c2f402c26205c205c250a29d19733ac58bbdebbd9be1fd6656b6d6c4144f9dba00dad4ef5df7db95c3471e22e66d191b115b73848162a487759624b80a228b5d63f065b95ad98a222ed922def3ed6fb1b7856"], 0x8e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000100), 0xfa6, 0x583880) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xfffffffffffff8e0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000040)) 18:24:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffdf9, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffff7f, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x80) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ee98d983a82caa83d60bac6e3d52340f0b67e093c567925505679826ab9076036384d6390c266bd17a58f0c28948895a314acadc71a21c453c539e01429ad076f736fd03d98a99aa4616b4b41761ebd16edcf0527ac06c010ebd77030e0ad7699cf371288b2ab9c996a906f2e53939b7594e00ac57be", @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) [ 591.239623][T25958] sp0: Synchronizing with TNC 18:24:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x80) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ee98d983a82caa83d60bac6e3d52340f0b67e093c567925505679826ab9076036384d6390c266bd17a58f0c28948895a314acadc71a21c453c539e01429ad076f736fd03d98a99aa4616b4b41761ebd16edcf0527ac06c010ebd77030e0ad7699cf371288b2ab9c996a906f2e53939b7594e00ac57be", @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:24:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffff85, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x8000, 0x80000000, 0x7, 0x3, 0xe, "79d95f26ec2a852eac13f1466f774b1a66f043"}) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f766373612300202f6465762f7a65726f00205b202f6465762f7a65726f00202325320d20282524205d5d275c2f402c26205c205c250a29d19733ac58bbdebbd9be1fd6656b6d6c4144f9dba00dad4ef5df7db95c3471e22e66d191b115b73848162a487759624b80a228b5d63f065b95ad98a222ed922def3ed6fb1b7856"], 0x8e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$vcsa(&(0x7f0000000100), 0xfa6, 0x583880) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0xfffffffffffff8e0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xfffffffffffff8e0) (async) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000040)) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffff8c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1080000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5203, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 591.497023][T25979] sp0: Synchronizing with TNC 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffff97, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r3) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r4, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x80) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ee98d983a82caa83d60bac6e3d52340f0b67e093c567925505679826ab9076036384d6390c266bd17a58f0c28948895a314acadc71a21c453c539e01429ad076f736fd03d98a99aa4616b4b41761ebd16edcf0527ac06c010ebd77030e0ad7699cf371288b2ab9c996a906f2e53939b7594e00ac57be", @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) (rerun: 64) 18:24:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5303, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffff8c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffffda, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:07 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) (fail_nth: 1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xffffffeb, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) ptrace(0x10, 0x0) r4 = getegid() r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) setpgid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0xd0, 0x40, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="d02b134409b2e3f44710bef900eef16573bad37ca3863ae645c48f55d86216facc4ec37ca74fcf825037654002f240b5e55fbf9562000900290e6f6b3dde7a1e2b13c0824a541625dfa21adf8acf5c3461e4ed59956761fd9ce6665e893f72b7d8a0702e761c4916b2a1053adde2519ea45f550414dd87107b1f2932b55b1fcab5c228667e8ef8a97a8dcbf4624b34e307dd98b69af31aad8fdac225a075fb1d4b6d0cea5655bfa812b885f8a0721cabacf462a9", @typed={0x4, 0x1f}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0xd0}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r3}}}], 0xe8, 0x40}, 0xc8) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x6) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0xfffffffffffff8e0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x81) [ 591.944736][T26017] FAULT_INJECTION: forcing a failure. [ 591.944736][T26017] name failslab, interval 1, probability 0, space 0, times 0 18:24:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffff0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 592.048746][T26017] CPU: 1 PID: 26017 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 592.057538][T26017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.067594][T26017] Call Trace: [ 592.070874][T26017] [ 592.073802][T26017] dump_stack_lvl+0x201/0x2d8 [ 592.078489][T26017] ? show_regs_print_info+0x12/0x12 [ 592.083692][T26017] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 592.089413][T26017] ? __might_sleep+0xe0/0xe0 [ 592.094111][T26017] should_fail+0x384/0x4b0 [ 592.098530][T26017] ? kvmalloc_node+0x6e/0xe0 [ 592.103115][T26017] should_failslab+0x5/0x20 [ 592.107616][T26017] __kmalloc_node+0x97/0x420 [ 592.112297][T26017] kvmalloc_node+0x6e/0xe0 [ 592.116715][T26017] file_tty_write+0x34e/0x9a0 [ 592.121395][T26017] ? n_tty_read+0x1c60/0x1c60 [ 592.126071][T26017] vfs_write+0xb11/0xe90 [ 592.130316][T26017] ? file_end_write+0x230/0x230 [ 592.135168][T26017] ? __fget_files+0x3d0/0x440 [ 592.139841][T26017] ? __fdget_pos+0x1d8/0x2f0 [ 592.144439][T26017] ? ksys_write+0x77/0x2c0 [ 592.148855][T26017] ksys_write+0x18f/0x2c0 [ 592.153193][T26017] ? print_irqtrace_events+0x220/0x220 [ 592.158654][T26017] ? __ia32_sys_read+0x80/0x80 [ 592.163449][T26017] ? lockdep_hardirqs_on+0x95/0x140 [ 592.168645][T26017] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 592.174620][T26017] do_syscall_64+0x44/0xd0 [ 592.179034][T26017] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 592.184919][T26017] RIP: 0033:0x7fc3cea2f059 [ 592.189328][T26017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 592.208926][T26017] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.217338][T26017] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 592.225478][T26017] RDX: 000000000000ff2e RSI: 0000000020000200 RDI: 0000000000000003 [ 592.233468][T26017] RBP: 00007fc3cd3a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 592.241431][T26017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.249396][T26017] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 592.257382][T26017] 18:24:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async) ptrace(0x10, 0x0) r4 = getegid() r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) setpgid(0x0, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0xd0, 0x40, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="d02b134409b2e3f44710bef900eef16573bad37ca3863ae645c48f55d86216facc4ec37ca74fcf825037654002f240b5e55fbf9562000900290e6f6b3dde7a1e2b13c0824a541625dfa21adf8acf5c3461e4ed59956761fd9ce6665e893f72b7d8a0702e761c4916b2a1053adde2519ea45f550414dd87107b1f2932b55b1fcab5c228667e8ef8a97a8dcbf4624b34e307dd98b69af31aad8fdac225a075fb1d4b6d0cea5655bfa812b885f8a0721cabacf462a9", @typed={0x4, 0x1f}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0xd0}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r3}}}], 0xe8, 0x40}, 0xc8) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x6) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0xfffffffffffff8e0) (async) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x81) 18:24:08 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6601, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffff6, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004884) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) 18:24:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffffd, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6701, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) (fail_nth: 2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:08 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) (async) ptrace(0x10, 0x0) (async) r4 = getegid() (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, 0x0}) setpgid(0x0, r7) (async) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0xd0, 0x40, 0x1, 0x70bd25, 0x25dfdbfc, "", [@generic="d02b134409b2e3f44710bef900eef16573bad37ca3863ae645c48f55d86216facc4ec37ca74fcf825037654002f240b5e55fbf9562000900290e6f6b3dde7a1e2b13c0824a541625dfa21adf8acf5c3461e4ed59956761fd9ce6665e893f72b7d8a0702e761c4916b2a1053adde2519ea45f550414dd87107b1f2932b55b1fcab5c228667e8ef8a97a8dcbf4624b34e307dd98b69af31aad8fdac225a075fb1d4b6d0cea5655bfa812b885f8a0721cabacf462a9", @typed={0x4, 0x1f}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, 0xd0}], 0x1, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, r9, r3}}}], 0xe8, 0x40}, 0xc8) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x0, r1}) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x6) (async) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r11, 0xfffffffffffff8e0) (async, rerun: 64) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x2) (async, rerun: 64) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x81) 18:24:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004884) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004884) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) (async) 18:24:08 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffffe, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 592.775344][T26053] FAULT_INJECTION: forcing a failure. [ 592.775344][T26053] name fail_usercopy, interval 1, probability 0, space 0, times 0 18:24:08 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6800, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x400, 0x8, [0x1, 0x8, 0x100000000, 0x4], &(0x7f0000000000)=[0x0]}) [ 592.836281][T26053] CPU: 0 PID: 26053 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 592.845092][T26053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.855173][T26053] Call Trace: [ 592.858473][T26053] [ 592.861634][T26053] dump_stack_lvl+0x201/0x2d8 [ 592.866324][T26053] ? show_regs_print_info+0x12/0x12 [ 592.871526][T26053] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 592.877255][T26053] ? __might_fault+0xb6/0x110 [ 592.881942][T26053] ? __lock_acquire+0x2b00/0x2b00 [ 592.886970][T26053] should_fail+0x384/0x4b0 [ 592.891413][T26053] _copy_from_iter+0x25b/0x1170 [ 592.896269][T26053] ? _copy_mc_to_iter+0x1610/0x1610 [ 592.901463][T26053] ? kvmalloc_node+0x6e/0xe0 [ 592.906132][T26053] ? __kmalloc_node+0x28e/0x420 [ 592.910975][T26053] ? file_tty_write+0x390/0x9a0 [ 592.915818][T26053] ? __virt_addr_valid+0x21b/0x2d0 [ 592.921013][T26053] ? __check_object_size+0x262/0x340 [ 592.926296][T26053] file_tty_write+0x582/0x9a0 [ 592.930970][T26053] ? n_tty_read+0x1c60/0x1c60 [ 592.935665][T26053] vfs_write+0xb11/0xe90 [ 592.939948][T26053] ? file_end_write+0x230/0x230 [ 592.944805][T26053] ? __fget_files+0x3d0/0x440 [ 592.949475][T26053] ? __fdget_pos+0x1d8/0x2f0 [ 592.954051][T26053] ? ksys_write+0x77/0x2c0 [ 592.958459][T26053] ksys_write+0x18f/0x2c0 [ 592.962776][T26053] ? print_irqtrace_events+0x220/0x220 [ 592.968224][T26053] ? __ia32_sys_read+0x80/0x80 [ 592.972994][T26053] ? lockdep_hardirqs_on+0x95/0x140 [ 592.978208][T26053] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 592.984182][T26053] do_syscall_64+0x44/0xd0 [ 592.988602][T26053] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 592.994574][T26053] RIP: 0033:0x7fc3cea2f059 [ 592.999006][T26053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.018733][T26053] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.027153][T26053] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 18:24:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004884) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (async) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r4, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004884) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x801}, 0x14}}, 0x0) (async) [ 593.035115][T26053] RDX: 000000000000ff2e RSI: 0000000020000200 RDI: 0000000000000003 [ 593.043093][T26053] RBP: 00007fc3cd3a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.051048][T26053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.059017][T26053] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 593.066999][T26053] 18:24:09 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:09 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 593.246991][T26068] sp0: Synchronizing with TNC 18:24:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) (fail_nth: 3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:09 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:09 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 18:24:09 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x400, 0x8, [0x1, 0x8, 0x100000000, 0x4], &(0x7f0000000000)=[0x0]}) 18:24:09 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 18:24:09 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:09 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 593.525383][T26094] FAULT_INJECTION: forcing a failure. [ 593.525383][T26094] name failslab, interval 1, probability 0, space 0, times 0 [ 593.525607][T26094] [ 593.525610][T26094] ====================================================== [ 593.525613][T26094] WARNING: possible circular locking dependency detected [ 593.525617][T26094] 5.17.0-rc4-syzkaller #0 Not tainted [ 593.525621][T26094] ------------------------------------------------------ [ 593.525624][T26094] syz-executor.3/26094 is trying to acquire lock: [ 593.525628][T26094] ffffffff8cb11800 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x2d/0x60 [ 593.525657][T26094] [ 593.525657][T26094] but task is already holding lock: [ 593.525659][T26094] ffff88807745b158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xc5/0x170 [ 593.525679][T26094] [ 593.525679][T26094] which lock already depends on the new lock. [ 593.525679][T26094] [ 593.525682][T26094] [ 593.525682][T26094] the existing dependency chain (in reverse order) is: [ 593.525685][T26094] [ 593.525685][T26094] -> #2 (&port->lock){-.-.}-{2:2}: [ 593.525695][T26094] lock_acquire+0x19f/0x4d0 [ 593.525707][T26094] _raw_spin_lock_irqsave+0xd1/0x120 [ 593.525716][T26094] tty_port_tty_get+0x21/0xe0 [ 593.525724][T26094] tty_port_default_wakeup+0x11/0x40 [ 593.525731][T26094] serial8250_tx_chars+0x68e/0x8a0 [ 593.525808][T26094] serial8250_handle_irq+0x2fd/0x3e0 [ 593.525817][T26094] serial8250_default_handle_irq+0xaf/0x190 [ 593.525826][T26094] serial8250_interrupt+0xa3/0x1e0 [ 593.525833][T26094] __handle_irq_event_percpu+0x1f7/0x660 [ 593.525842][T26094] handle_irq_event+0x83/0x1e0 [ 593.525849][T26094] handle_edge_irq+0x245/0xbe0 [ 593.525858][T26094] __common_interrupt+0xce/0x1e0 [ 593.525868][T26094] common_interrupt+0x9f/0xc0 [ 593.525877][T26094] asm_common_interrupt+0x1e/0x40 [ 593.525884][T26094] acpi_idle_enter+0x42d/0x790 [ 593.525916][T26094] cpuidle_enter_state+0x507/0xea0 [ 593.525945][T26094] cpuidle_enter+0x59/0x90 [ 593.525952][T26094] do_idle+0x3e8/0x670 [ 593.525960][T26094] cpu_startup_entry+0x15/0x20 [ 593.525967][T26094] start_kernel+0x4bf/0x56e [ 593.525985][T26094] secondary_startup_64_no_verify+0xc4/0xcb [ 593.526000][T26094] [ 593.526000][T26094] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 593.526012][T26094] lock_acquire+0x19f/0x4d0 [ 593.526021][T26094] _raw_spin_lock_irqsave+0xd1/0x120 [ 593.526030][T26094] serial8250_console_write+0x19c/0xf30 [ 593.526038][T26094] console_unlock+0xb00/0xe90 [ 593.526047][T26094] vprintk_emit+0xba/0x140 [ 593.526055][T26094] _printk+0xcf/0x118 [ 593.526063][T26094] register_console+0x72c/0xa20 [ 593.526071][T26094] univ8250_console_init+0x41/0x43 [ 593.526088][T26094] console_init+0x52/0x97 [ 593.526102][T26094] start_kernel+0x32d/0x56e [ 593.526114][T26094] secondary_startup_64_no_verify+0xc4/0xcb [ 593.526128][T26094] [ 593.526128][T26094] -> #0 (console_owner){-...}-{0:0}: [ 593.526147][T26094] validate_chain+0x1dfb/0x8250 [ 593.526163][T26094] __lock_acquire+0x1382/0x2b00 [ 593.526177][T26094] lock_acquire+0x19f/0x4d0 [ 593.526190][T26094] console_lock_spinning_enable+0x52/0x60 [ 593.526212][T26094] console_unlock+0x834/0xe90 [ 593.526224][T26094] vprintk_emit+0xba/0x140 [ 593.526238][T26094] _printk+0xcf/0x118 [ 593.526251][T26094] should_fail+0x366/0x4b0 [ 593.526267][T26094] should_failslab+0x5/0x20 [ 593.526281][T26094] __kmalloc+0x94/0x380 [ 593.526295][T26094] __tty_buffer_request_room+0x1f0/0x540 [ 593.526308][T26094] tty_insert_flip_string_fixed_flag+0x92/0x2c0 [ 593.526322][T26094] pty_write+0xe9/0x170 [ 593.526334][T26094] n_tty_write+0x646/0x1320 [ 593.526349][T26094] file_tty_write+0x5c5/0x9a0 [ 593.526361][T26094] vfs_write+0xb11/0xe90 [ 593.526372][T26094] ksys_write+0x18f/0x2c0 [ 593.526384][T26094] do_syscall_64+0x44/0xd0 [ 593.526396][T26094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 593.526409][T26094] [ 593.526409][T26094] other info that might help us debug this: [ 593.526409][T26094] [ 593.526413][T26094] Chain exists of: [ 593.526413][T26094] console_owner --> &port_lock_key --> &port->lock [ 593.526413][T26094] [ 593.526436][T26094] Possible unsafe locking scenario: [ 593.526436][T26094] [ 593.526440][T26094] CPU0 CPU1 [ 593.526445][T26094] ---- ---- [ 593.526448][T26094] lock(&port->lock); [ 593.526457][T26094] lock(&port_lock_key); [ 593.526467][T26094] lock(&port->lock); [ 593.526477][T26094] lock(console_owner); [ 593.526486][T26094] [ 593.526486][T26094] *** DEADLOCK *** [ 593.526486][T26094] [ 593.526489][T26094] 6 locks held by syz-executor.3/26094: [ 593.526499][T26094] #0: ffff88807b626098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 593.526538][T26094] #1: ffff88807b626130 (&tty->atomic_write_lock){+.+.}-{3:3}, at: file_tty_write+0x271/0x9a0 [ 593.526573][T26094] #2: ffff88807b6262e8 (&tty->termios_rwsem){++++}-{3:3}, at: n_tty_write+0x23e/0x1320 [ 593.526609][T26094] #3: ffffc900100fb378 (&ldata->output_lock){+.+.}-{3:3}, at: n_tty_write+0x5fa/0x1320 [ 593.526644][T26094] #4: ffff88807745b158 (&port->lock){-.-.}-{2:2}, at: pty_write+0xc5/0x170 [ 593.526677][T26094] #5: ffffffff8c9f94a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa1/0x140 [ 593.526712][T26094] [ 593.526712][T26094] stack backtrace: [ 593.526717][T26094] CPU: 1 PID: 26094 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 593.526733][T26094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.526741][T26094] Call Trace: [ 593.526745][T26094] [ 593.526751][T26094] dump_stack_lvl+0x1dc/0x2d8 [ 593.526772][T26094] ? show_regs_print_info+0x12/0x12 [ 593.526789][T26094] ? save_trace+0x5a/0x9f0 [ 593.526815][T26094] ? print_circular_bug+0x48e/0x5d0 [ 593.526832][T26094] check_noncircular+0x2f9/0x3b0 [ 593.526851][T26094] ? add_chain_block+0x850/0x850 [ 593.526867][T26094] ? lockdep_lock+0x11d/0x2e0 [ 593.526882][T26094] ? _find_first_zero_bit+0xe1/0x100 [ 593.526903][T26094] validate_chain+0x1dfb/0x8250 [ 593.526928][T26094] ? reacquire_held_locks+0x620/0x620 [ 593.526944][T26094] ? mark_lock+0x191/0x1e00 [ 593.526963][T26094] ? __print_lock_name+0x1d0/0x1d0 [ 593.526977][T26094] ? mark_lock+0x191/0x1e00 [ 593.526994][T26094] ? memcpy+0x3c/0x60 [ 593.527013][T26094] ? ptr_to_hashval+0x60/0x60 [ 593.527032][T26094] __lock_acquire+0x1382/0x2b00 [ 593.527054][T26094] ? trace_lock_acquire+0x190/0x190 [ 593.527069][T26094] ? rcu_read_lock_sched_held+0x89/0x130 [ 593.527086][T26094] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 593.527101][T26094] ? info_print_prefix+0x205/0x300 [ 593.527120][T26094] lock_acquire+0x19f/0x4d0 [ 593.527135][T26094] ? console_lock_spinning_enable+0x2d/0x60 [ 593.527155][T26094] ? read_lock_is_recursive+0x10/0x10 [ 593.527171][T26094] ? console_lock_spinning_enable+0x2d/0x60 [ 593.527187][T26094] ? __lock_acquire+0x2b00/0x2b00 [ 593.527202][T26094] ? do_raw_spin_lock+0x151/0x8e0 [ 593.527222][T26094] ? _raw_spin_unlock+0x40/0x40 [ 593.527240][T26094] console_lock_spinning_enable+0x52/0x60 [ 593.527255][T26094] ? console_lock_spinning_enable+0x2d/0x60 [ 593.527270][T26094] console_unlock+0x834/0xe90 [ 593.527289][T26094] ? console_trylock_spinning+0x3f0/0x3f0 [ 593.527304][T26094] ? vprintk_emit+0xa1/0x140 [ 593.527320][T26094] ? console_trylock+0x70/0x70 [ 593.527337][T26094] ? __lock_acquire+0x1382/0x2b00 [ 593.527357][T26094] ? __lock_acquire+0x1382/0x2b00 [ 593.527371][T26094] ? trace_lock_acquire+0x190/0x190 [ 593.527387][T26094] vprintk_emit+0xba/0x140 [ 593.527404][T26094] _printk+0xcf/0x118 [ 593.527421][T26094] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 593.527444][T26094] should_fail+0x366/0x4b0 [ 593.527462][T26094] ? __tty_buffer_request_room+0x1f0/0x540 [ 593.527474][T26094] should_failslab+0x5/0x20 [ 593.527488][T26094] __kmalloc+0x94/0x380 [ 593.527506][T26094] __tty_buffer_request_room+0x1f0/0x540 [ 593.527525][T26094] tty_insert_flip_string_fixed_flag+0x92/0x2c0 [ 593.527541][T26094] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 593.527559][T26094] ? _raw_spin_unlock+0x40/0x40 [ 593.527578][T26094] pty_write+0xe9/0x170 [ 593.527593][T26094] n_tty_write+0x646/0x1320 [ 593.527607][T26094] ? __might_fault+0xb2/0x110 [ 593.527630][T26094] ? n_tty_read+0x1c60/0x1c60 [ 593.527646][T26094] ? wait_woken+0x1b0/0x1b0 [ 593.527662][T26094] ? file_tty_write+0x390/0x9a0 [ 593.527675][T26094] ? __virt_addr_valid+0x21b/0x2d0 [ 593.527692][T26094] ? __check_object_size+0x262/0x340 [ 593.527708][T26094] file_tty_write+0x5c5/0x9a0 [ 593.527723][T26094] ? n_tty_read+0x1c60/0x1c60 [ 593.527740][T26094] vfs_write+0xb11/0xe90 [ 593.527758][T26094] ? file_end_write+0x230/0x230 [ 593.527774][T26094] ? __fget_files+0x3d0/0x440 [ 593.527792][T26094] ? __fdget_pos+0x1d8/0x2f0 [ 593.527813][T26094] ? ksys_write+0x77/0x2c0 [ 593.527828][T26094] ksys_write+0x18f/0x2c0 [ 593.527842][T26094] ? print_irqtrace_events+0x220/0x220 [ 593.527861][T26094] ? __ia32_sys_read+0x80/0x80 [ 593.527875][T26094] ? lockdep_hardirqs_on+0x95/0x140 [ 593.527892][T26094] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 593.527910][T26094] do_syscall_64+0x44/0xd0 [ 593.527926][T26094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 593.527941][T26094] RIP: 0033:0x7fc3cea2f059 [ 593.527954][T26094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 593.527966][T26094] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 593.527983][T26094] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 593.527995][T26094] RDX: 000000000000ff2e RSI: 0000000020000200 RDI: 0000000000000003 [ 593.528005][T26094] RBP: 00007fc3cd3a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 593.528015][T26094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.528024][T26094] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 593.528042][T26094] [ 594.497366][T26094] CPU: 1 PID: 26094 Comm: syz-executor.3 Not tainted 5.17.0-rc4-syzkaller #0 [ 594.506112][T26094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.516155][T26094] Call Trace: [ 594.519427][T26094] [ 594.522373][T26094] dump_stack_lvl+0x1dc/0x2d8 [ 594.527044][T26094] ? show_regs_print_info+0x12/0x12 [ 594.532230][T26094] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 594.537941][T26094] should_fail+0x384/0x4b0 [ 594.542350][T26094] ? __tty_buffer_request_room+0x1f0/0x540 [ 594.548145][T26094] should_failslab+0x5/0x20 [ 594.552641][T26094] __kmalloc+0x94/0x380 [ 594.556838][T26094] __tty_buffer_request_room+0x1f0/0x540 [ 594.562728][T26094] tty_insert_flip_string_fixed_flag+0x92/0x2c0 [ 594.568974][T26094] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 594.574863][T26094] ? _raw_spin_unlock+0x40/0x40 [ 594.579704][T26094] pty_write+0xe9/0x170 [ 594.583845][T26094] n_tty_write+0x646/0x1320 [ 594.588334][T26094] ? __might_fault+0xb2/0x110 [ 594.593004][T26094] ? n_tty_read+0x1c60/0x1c60 [ 594.597667][T26094] ? wait_woken+0x1b0/0x1b0 [ 594.602157][T26094] ? file_tty_write+0x390/0x9a0 [ 594.607264][T26094] ? __virt_addr_valid+0x21b/0x2d0 [ 594.612362][T26094] ? __check_object_size+0x262/0x340 [ 594.617632][T26094] file_tty_write+0x5c5/0x9a0 [ 594.622321][T26094] ? n_tty_read+0x1c60/0x1c60 [ 594.626985][T26094] vfs_write+0xb11/0xe90 [ 594.631214][T26094] ? file_end_write+0x230/0x230 [ 594.636056][T26094] ? __fget_files+0x3d0/0x440 [ 594.640722][T26094] ? __fdget_pos+0x1d8/0x2f0 [ 594.645298][T26094] ? ksys_write+0x77/0x2c0 [ 594.649702][T26094] ksys_write+0x18f/0x2c0 [ 594.654021][T26094] ? print_irqtrace_events+0x220/0x220 [ 594.659555][T26094] ? __ia32_sys_read+0x80/0x80 [ 594.664305][T26094] ? lockdep_hardirqs_on+0x95/0x140 [ 594.669493][T26094] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 594.675461][T26094] do_syscall_64+0x44/0xd0 [ 594.679861][T26094] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 594.685741][T26094] RIP: 0033:0x7fc3cea2f059 [ 594.690152][T26094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 594.710005][T26094] RSP: 002b:00007fc3cd3a4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 594.718402][T26094] RAX: ffffffffffffffda RBX: 00007fc3ceb41f60 RCX: 00007fc3cea2f059 [ 594.726357][T26094] RDX: 000000000000ff2e RSI: 0000000020000200 RDI: 0000000000000003 [ 594.734320][T26094] RBP: 00007fc3cd3a41d0 R08: 0000000000000000 R09: 0000000000000000 [ 594.742281][T26094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.750238][T26094] R13: 00007ffde81bbd0f R14: 00007fc3cd3a4300 R15: 0000000000022000 [ 594.758195][T26094] [ 594.783944][T26093] sp0: Synchronizing with TNC 18:24:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 18:24:10 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x400, 0x8, [0x1, 0x8, 0x100000000, 0x4], &(0x7f0000000000)=[0x0]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000040)={0x400, 0x8, [0x1, 0x8, 0x100000000, 0x4], &(0x7f0000000000)=[0x0]}) (async) 18:24:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080000001e03efc7e60100"], 0x14}}, 0x0) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9802, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xedc000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080000001e03efc7e60100"], 0x14}}, 0x0) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9902, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 594.981416][T26124] sp0: Synchronizing with TNC 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x17, 0x2a580000, 0x543, 0x1ff, 0x1000}) 18:24:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x1800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080000001e03efc7e60100"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080000001e03efc7e60100"], 0x14}}, 0x0) (async) 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xab00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 595.120218][T26141] sp0: Synchronizing with TNC 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x17, 0x2a580000, 0x543, 0x1ff, 0x1000}) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:11 executing program 5: shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x2000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xad00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 595.280282][T26158] sp0: Synchronizing with TNC 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x108000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 5: shutdown(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) shutdown(0xffffffffffffffff, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) (async) 18:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x17, 0x2a580000, 0x543, 0x1ff, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) fsmount(0xffffffffffffffff, 0x1, 0x1) (async) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000000)={0x17, 0x2a580000, 0x543, 0x1ff, 0x1000}) (async) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 595.397054][T26177] sp0: Synchronizing with TNC 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 5: shutdown(0xffffffffffffffff, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:11 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x2800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x300000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:24:11 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xcf00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7cd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 595.602510][T26202] sp0: Synchronizing with TNC 18:24:11 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 595.633324][T26205] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 595.662480][T26205] CPU: 1 PID: 26205 Comm: syz-executor.0 Not tainted 5.17.0-rc4-syzkaller #0 [ 595.671297][T26205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.681358][T26205] Call Trace: [ 595.684627][T26205] [ 595.687544][T26205] dump_stack_lvl+0x201/0x2d8 [ 595.692248][T26205] ? show_regs_print_info+0x12/0x12 [ 595.697437][T26205] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 595.703154][T26205] sysfs_create_dir_ns+0x2c4/0x390 [ 595.708291][T26205] ? sysfs_warn_dup+0xa0/0xa0 [ 595.712961][T26205] ? do_raw_spin_unlock+0x134/0x8a0 [ 595.718152][T26205] kobject_add_internal+0x418/0xb50 [ 595.723345][T26205] kobject_add+0x14c/0x210 [ 595.727767][T26205] ? kobject_init+0x1d0/0x1d0 [ 595.732451][T26205] ? get_device_parent+0x2cd/0x430 [ 595.737579][T26205] device_add+0x523/0x16d0 [ 595.741997][T26205] ? virtual_device_parent+0x50/0x50 [ 595.747541][T26205] ? memcpy+0x3c/0x60 [ 595.751535][T26205] device_create+0x252/0x2e0 [ 595.756139][T26205] ? vsnprintf+0x18e/0x1d40 [ 595.760651][T26205] ? root_device_unregister+0x100/0x100 [ 595.766208][T26205] ? __percpu_counter_init+0x1fd/0x230 [ 595.771665][T26205] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 595.777985][T26205] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 595.784307][T26205] bdi_register_va+0x86/0x530 [ 595.788990][T26205] super_setup_bdi_name+0xe0/0x1f0 [ 595.794111][T26205] ? __lock_acquire+0x2b00/0x2b00 [ 595.799130][T26205] ? vfs_get_tree+0x270/0x270 [ 595.803804][T26205] ? do_raw_spin_unlock+0x134/0x8a0 [ 595.808995][T26205] fuse_fill_super_common+0x6e1/0x11a0 [ 595.814448][T26205] ? fuse_init_fs_context_submount+0x40/0x40 [ 595.820422][T26205] ? snprintf+0xd6/0x120 [ 595.824664][T26205] ? vscnprintf+0x80/0x80 [ 595.828997][T26205] ? set_blocksize+0x1d5/0x360 [ 595.833758][T26205] fuse_fill_super+0x170/0x1e0 [ 595.838517][T26205] get_tree_bdev+0x406/0x630 [ 595.843108][T26205] ? fuse_reconfigure+0xb0/0xb0 [ 595.847955][T26205] fuse_get_tree+0x31c/0x4a0 [ 595.852553][T26205] vfs_get_tree+0x86/0x270 [ 595.856973][T26205] path_mount+0x1986/0x2c30 [ 595.861481][T26205] ? slab_free_freelist_hook+0x12e/0x1a0 [ 595.867111][T26205] ? mark_mounts_for_expiry+0x520/0x520 [ 595.872672][T26205] ? user_path_at_empty+0x149/0x1a0 [ 595.877871][T26205] ? kmem_cache_free+0xb6/0x1c0 [ 595.882713][T26205] ? user_path_at_empty+0x149/0x1a0 [ 595.887902][T26205] __se_sys_mount+0x308/0x3c0 [ 595.892568][T26205] ? vtime_user_exit+0x2b2/0x3e0 [ 595.897496][T26205] ? __x64_sys_mount+0xc0/0xc0 [ 595.902257][T26205] ? __x64_sys_mount+0x1c/0xc0 [ 595.907008][T26205] do_syscall_64+0x44/0xd0 [ 595.911418][T26205] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 595.917297][T26205] RIP: 0033:0x7fd07601f059 [ 595.921703][T26205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 595.941385][T26205] RSP: 002b:00007fd074994168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.949797][T26205] RAX: ffffffffffffffda RBX: 00007fd076131f60 RCX: 00007fd07601f059 [ 595.957756][T26205] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 595.965714][T26205] RBP: 00007fd07607908d R08: 00000000200001c0 R09: 0000000000000000 [ 595.973679][T26205] R10: 000000000e000000 R11: 0000000000000246 R12: 0000000000000000 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xea02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) (async, rerun: 64) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7cd) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) [ 595.981641][T26205] R13: 00007ffd50261bef R14: 00007fd074994300 R15: 0000000000022000 [ 595.989620][T26205] 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x3000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x500000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xeb02, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0108000000000000000001000000"], 0x14}}, 0x0) 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x3800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 596.108010][T26205] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. [ 596.129232][T26218] sp0: Synchronizing with TNC 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x600000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="5ffc92df9980bdb6dc02ad94a571c98c46584480f3f9e1af760d8d08439384edd542dbae8ac7965adbf21e72c9a697c8a9a83d4eeffca6e0a80af4297ffeba0931121f7713774205957c33babfe3d5d9c26a21e3890a07356bd5685800253a437fdf5980fab7a7e5aac435efe7a2a84cf440957bfbdfbcd6be9b71924b44c0753a94b7f8c60af62bb7f490611845d7897f16688333554c966861f70a0d1300ec8f8ef743350eca390b7c14d98047d2d3e6a7b8"], 0x14}}, 0x0) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xedc0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7cd) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xfffffffffffff8e0) (async) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x7cd) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x700000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="5ffc92df9980bdb6dc02ad94a571c98c46584480f3f9e1af760d8d08439384edd542dbae8ac7965adbf21e72c9a697c8a9a83d4eeffca6e0a80af4297ffeba0931121f7713774205957c33babfe3d5d9c26a21e3890a07356bd5685800253a437fdf5980fab7a7e5aac435efe7a2a84cf440957bfbdfbcd6be9b71924b44c0753a94b7f8c60af62bb7f490611845d7897f16688333554c966861f70a0d1300ec8f8ef743350eca390b7c14d98047d2d3e6a7b8"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="5ffc92df9980bdb6dc02ad94a571c98c46584480f3f9e1af760d8d08439384edd542dbae8ac7965adbf21e72c9a697c8a9a83d4eeffca6e0a80af4297ffeba0931121f7713774205957c33babfe3d5d9c26a21e3890a07356bd5685800253a437fdf5980fab7a7e5aac435efe7a2a84cf440957bfbdfbcd6be9b71924b44c0753a94b7f8c60af62bb7f490611845d7897f16688333554c966861f70a0d1300ec8f8ef743350eca390b7c14d98047d2d3e6a7b8"], 0x14}}, 0x0) (async) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xff00, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x4000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 596.388559][T26254] sp0: Synchronizing with TNC 18:24:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="5ffc92df9980bdb6dc02ad94a571c98c46584480f3f9e1af760d8d08439384edd542dbae8ac7965adbf21e72c9a697c8a9a83d4eeffca6e0a80af4297ffeba0931121f7713774205957c33babfe3d5d9c26a21e3890a07356bd5685800253a437fdf5980fab7a7e5aac435efe7a2a84cf440957bfbdfbcd6be9b71924b44c0753a94b7f8c60af62bb7f490611845d7897f16688333554c966861f70a0d1300ec8f8ef743350eca390b7c14d98047d2d3e6a7b8"], 0x14}}, 0x0) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x4800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x900000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x901}, 0x14}}, 0x20000010) [ 596.527271][T26274] sp0: Synchronizing with TNC 18:24:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x100000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x901}, 0x14}}, 0x20000010) 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x5000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:12 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x18000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1fffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 596.705989][T26292] sp0: Synchronizing with TNC 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x901}, 0x14}}, 0x20000010) 18:24:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x5800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:12 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14020000", @ANYRES16=r2, @ANYBLOB="01080000009b0000000001000000"], 0x14}}, 0x0) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x6000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 596.899095][T26317] sp0: Synchronizing with TNC 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14020000", @ANYRES16=r2, @ANYBLOB="01080000009b0000000001000000"], 0x14}}, 0x0) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20100000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x6800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1080000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xfffffffffffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14020000", @ANYRES16=r2, @ANYBLOB="01080000009b0000000001000000"], 0x14}}, 0x0) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x25000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 597.097529][T26341] sp0: Synchronizing with TNC 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1000000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2c020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1100000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x7000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2d020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 597.315892][T26362] sp0: Synchronizing with TNC 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1200000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x7800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000015) (async) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x30030000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1800000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2000000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 597.502898][T26385] sp0: Synchronizing with TNC 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x31030000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) (async) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x8800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 2: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0400680000000000000000000000d98b793f444167d22469ab8b2ae72b7e27fe64ef4af3d6b45f7123d14829ee1c04000000d9269174840ebb12ae4fd903000000bf377a31dd"], 0x48}}, 0x0) fcntl$addseals(r1, 0x409, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2010000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x9000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (rerun: 64) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) [ 597.630468][T26411] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2500000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:13 executing program 2: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0400680000000000000000000000d98b793f444167d22469ab8b2ae72b7e27fe64ef4af3d6b45f7123d14829ee1c04000000d9269174840ebb12ae4fd903000000bf377a31dd"], 0x48}}, 0x0) fcntl$addseals(r1, 0x409, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load\x00', 0x2, 0x0) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) (async) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0400680000000000000000000000d98b793f444167d22469ab8b2ae72b7e27fe64ef4af3d6b45f7123d14829ee1c04000000d9269174840ebb12ae4fd903000000bf377a31dd"], 0x48}}, 0x0) (async) fcntl$addseals(r1, 0x409, 0x1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) 18:24:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0x9800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:13 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2c02000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:13 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00fcff0000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000801) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2d02000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00fcff0000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000801) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00fcff0000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000801) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) [ 597.920429][T26443] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 597.934279][T26446] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 597.968355][T26443] CPU: 0 PID: 26443 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 597.977158][T26443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.987334][T26443] Call Trace: [ 597.990605][T26443] [ 597.993527][T26443] dump_stack_lvl+0x201/0x2d8 [ 597.998202][T26443] ? show_regs_print_info+0x12/0x12 [ 598.003400][T26443] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 598.009121][T26443] sysfs_create_dir_ns+0x2c4/0x390 [ 598.014238][T26443] ? sysfs_warn_dup+0xa0/0xa0 [ 598.018916][T26443] ? do_raw_spin_unlock+0x134/0x8a0 [ 598.024144][T26443] kobject_add_internal+0x418/0xb50 [ 598.029487][T26443] kobject_add+0x14c/0x210 [ 598.033907][T26443] ? kobject_init+0x1d0/0x1d0 [ 598.038586][T26443] ? get_device_parent+0x2cd/0x430 [ 598.043741][T26443] device_add+0x523/0x16d0 [ 598.048156][T26443] ? virtual_device_parent+0x50/0x50 [ 598.053447][T26443] ? memcpy+0x3c/0x60 [ 598.057436][T26443] device_create+0x252/0x2e0 [ 598.062046][T26443] ? vsnprintf+0x18e/0x1d40 [ 598.066541][T26443] ? root_device_unregister+0x100/0x100 [ 598.072105][T26443] ? __percpu_counter_init+0x1fd/0x230 [ 598.077613][T26443] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 598.083966][T26443] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 598.090339][T26443] bdi_register_va+0x86/0x530 [ 598.095037][T26443] super_setup_bdi_name+0xe0/0x1f0 [ 598.100144][T26443] ? __lock_acquire+0x2b00/0x2b00 [ 598.105167][T26443] ? vfs_get_tree+0x270/0x270 [ 598.109848][T26443] ? do_raw_spin_unlock+0x134/0x8a0 [ 598.115062][T26443] fuse_fill_super_common+0x6e1/0x11a0 [ 598.120517][T26443] ? fuse_init_fs_context_submount+0x40/0x40 [ 598.126492][T26443] ? snprintf+0xd6/0x120 [ 598.130743][T26443] ? vscnprintf+0x80/0x80 [ 598.135061][T26443] ? set_blocksize+0x1d5/0x360 [ 598.139820][T26443] fuse_fill_super+0x170/0x1e0 [ 598.144584][T26443] get_tree_bdev+0x406/0x630 [ 598.149188][T26443] ? fuse_reconfigure+0xb0/0xb0 [ 598.154030][T26443] fuse_get_tree+0x31c/0x4a0 [ 598.158618][T26443] vfs_get_tree+0x86/0x270 [ 598.163050][T26443] path_mount+0x1986/0x2c30 [ 598.167559][T26443] ? slab_free_freelist_hook+0x12e/0x1a0 [ 598.173266][T26443] ? mark_mounts_for_expiry+0x520/0x520 [ 598.178896][T26443] ? user_path_at_empty+0x149/0x1a0 [ 598.184087][T26443] ? kmem_cache_free+0xb6/0x1c0 [ 598.188952][T26443] ? user_path_at_empty+0x149/0x1a0 [ 598.194153][T26443] __se_sys_mount+0x308/0x3c0 [ 598.198818][T26443] ? vtime_user_exit+0x2b2/0x3e0 [ 598.203838][T26443] ? __x64_sys_mount+0xc0/0xc0 [ 598.208613][T26443] ? __x64_sys_mount+0x1c/0xc0 [ 598.213368][T26443] do_syscall_64+0x44/0xd0 [ 598.217773][T26443] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 598.223654][T26443] RIP: 0033:0x7fe68358f059 [ 598.228056][T26443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 598.247645][T26443] RSP: 002b:00007fe681f04168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 598.256046][T26443] RAX: ffffffffffffffda RBX: 00007fe6836a1f60 RCX: 00007fe68358f059 18:24:14 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x48000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:14 executing program 2: r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load\x00', 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0400680000000000000000000000d98b793f444167d22469ab8b2ae72b7e27fe64ef4af3d6b45f7123d14829ee1c04000000d9269174840ebb12ae4fd903000000bf377a31dd"], 0x48}}, 0x0) (async) fcntl$addseals(r1, 0x409, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 598.264012][T26443] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 598.271995][T26443] RBP: 00007fe6835e908d R08: 00000000200001c0 R09: 0000000000000000 [ 598.280044][T26443] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.288012][T26443] R13: 00007fffecafd9cf R14: 00007fe681f04300 R15: 0000000000022000 [ 598.295980][T26443] 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3003000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xa000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:14 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)) [ 598.373206][T26443] kobject_add_internal failed for 7:0-fuseblk with -EEXIST, don't try to register things with the same name in the same directory. 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00fcff0000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000801) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00fcff0000000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x24000801) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3103000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 598.496920][T26480] sp0: Synchronizing with TNC 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080016002417647cafae58b7a2859531ba3a1c55b54b99f83cdfa1d03702394ba92f6c5692d40c75a23cfb987be44cbf5588d638b83f2e129aedec92f6b3ce01459192ed37d5"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7d}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x4c}}, 0x0) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x3f00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xa800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:14 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)) 18:24:14 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080016002417647cafae58b7a2859531ba3a1c55b54b99f83cdfa1d03702394ba92f6c5692d40c75a23cfb987be44cbf5588d638b83f2e129aedec92f6b3ce01459192ed37d5"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7d}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x4c}}, 0x0) [ 598.670739][T26498] sp0: Synchronizing with TNC 18:24:14 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x64000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xb000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4800000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffff8e0) (async) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)) (async) 18:24:14 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xa000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01080016002417647cafae58b7a2859531ba3a1c55b54b99f83cdfa1d03702394ba92f6c5692d40c75a23cfb987be44cbf5588d638b83f2e129aedec92f6b3ce01459192ed37d5"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r5, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7d}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}]}, 0x4c}}, 0x0) 18:24:14 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4c00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) [ 598.840530][T26519] sp0: Synchronizing with TNC 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xb000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x5c00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6400000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xb800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x68010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000100b648f320eed883418ea28ee1821c426c1934f0f411659e", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25010000003400048005000300060000000500030001000000050003000000000005000300050000000500030000000000050003000100000008000100ffffffff540004800500030002000000050003000500000005000300060000000500030000000000050003000000000005000300000000000500030001000000050003000000000005000300000000000500030000000000080001000100000008000100c63dfac60800010003000000"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x24000010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) [ 599.068453][T26546] sp0: Synchronizing with TNC 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x670c000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000100b648f320eed883418ea28ee1821c426c1934f0f411659e", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25010000003400048005000300060000000500030001000000050003000000000005000300050000000500030000000000050003000100000008000100ffffffff540004800500030002000000050003000500000005000300060000000500030000000000050003000000000005000300000000000500030001000000050003000000000005000300000000000500030000000000080001000100000008000100c63dfac60800010003000000"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x24000010) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xd000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xc000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc000100b648f320eed883418ea28ee1821c426c1934f0f411659e", @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf25010000003400048005000300060000000500030001000000050003000000000005000300050000000500030000000000050003000100000008000100ffffffff540004800500030002000000050003000500000005000300060000000500030000000000050003000000000005000300000000000500030001000000050003000000000005000300000000000500030000000000080001000100000008000100c63dfac60800010003000000"], 0xbc}, 0x1, 0x0, 0x0, 0x44}, 0x24000010) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x801}, 0x14}}, 0x0) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6800000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 599.253470][T26564] sp0: Synchronizing with TNC 18:24:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) (async) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) (async) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xe000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x74000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6801000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x400}, 0x14}}, 0x4004000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c060069", @ANYRES16=r6, @ANYBLOB="000226bd7000fcdbdf2505000000140003000000000000000000000000000000000114000600776c616e300000000000000000000000080004007f0000010800050064010102"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 18:24:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xc800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6c00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 599.425423][T26585] sp0: Synchronizing with TNC 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x400}, 0x14}}, 0x4004000) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c060069", @ANYRES16=r6, @ANYBLOB="000226bd7000fcdbdf2505000000140003000000000000000000000000000000000114000600776c616e300000000000000000000000080004007f0000010800050064010102"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 18:24:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7400000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x10000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x7a00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 599.571774][T26604] sp0: Synchronizing with TNC 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x85ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xd000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x85ffffff00000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x11000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8cffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xd800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) [ 599.786262][T26627] sp0: Synchronizing with TNC 18:24:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@NBD_ATTR_TIMEOUT={0xc, 0x4001, 0x10000}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x400}, 0x14}}, 0x4004000) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r4) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c060069", @ANYRES16=r6, @ANYBLOB="000226bd7000fcdbdf2505000000140003000000000000000000000000000000000114000600776c616e300000000000000000000000080004007f0000010800050064010102"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 18:24:15 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8cffffff00000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:15 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:15 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x12000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000180)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x81) 18:24:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x930b000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x96020000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xe000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:16 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 599.937265][T26650] sp0: Synchronizing with TNC 18:24:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x8) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18fef658d2405fb0a2cf46e5dbb347aabd371f3bb457d61439d25abfe72fe076038b5a33700b6cb5218f8dd46bf44801339a3b87607c489551e63a59195ae2a8b21805142a20c7180673fe19d480b77886e44603d9d3e6cff703dbfe51bd65a4335fb5017ab347e86b06f6307acf969706270b519bc0afa65d274ad094d7d6b2c9552474563028434dde6d9042b912646b18a34ae235ee3ed52d6bf18af65fa51cd7513a7cef0c55a441740e33f1746d0586b28139bfa0d1ce52fa34f34ef121fd219d56d5d1249f25cfa3acb29e309719c68c4d8b7a2706b8918fd05d0f54", @ANYRES16=r2, @ANYBLOB="0108f6ffffff000100000100000073bd6ec03c924ed83baa41c6da31"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x800) 18:24:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x9602000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x97ffffff, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xe800) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x97ffffff00000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:24:16 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x15010000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xc0ed0000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 18:24:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r3) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x74, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x85}, 0x8) (rerun: 32) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18fef658d2405fb0a2cf46e5dbb347aabd371f3bb457d61439d25abfe72fe076038b5a33700b6cb5218f8dd46bf44801339a3b87607c489551e63a59195ae2a8b21805142a20c7180673fe19d480b77886e44603d9d3e6cff703dbfe51bd65a4335fb5017ab347e86b06f6307acf969706270b519bc0afa65d274ad094d7d6b2c9552474563028434dde6d9042b912646b18a34ae235ee3ed52d6bf18af65fa51cd7513a7cef0c55a441740e33f1746d0586b28139bfa0d1ce52fa34f34ef121fd219d56d5d1249f25cfa3acb29e309719c68c4d8b7a2706b8918fd05d0f54", @ANYRES16=r2, @ANYBLOB="0108f6ffffff000100000100000073bd6ec03c924ed83baa41c6da31"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x800) 18:24:16 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004940), 0x2, 0x0) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0xce00000000000000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 18:24:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xf000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00e4d3f26c00000173d5e822a7632200"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) 18:24:16 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) 18:24:16 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x81) (async) [ 600.184853][T26675] sysfs: cannot create duplicate filename '/devices/virtual/bdi/7:0-fuseblk' [ 600.252599][T26675] CPU: 1 PID: 26675 Comm: syz-executor.4 Not tainted 5.17.0-rc4-syzkaller #0 [ 600.261415][T26675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 600.271475][T26675] Call Trace: [ 600.274744][T26675] [ 600.277663][T26675] dump_stack_lvl+0x201/0x2d8 [ 600.282347][T26675] ? show_regs_print_info+0x12/0x12 [ 600.287555][T26675] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 600.293304][T26675] sysfs_create_dir_ns+0x2c4/0x390 [ 600.298525][T26675] ? sysfs_warn_dup+0xa0/0xa0 [ 600.303196][T26675] ? do_raw_spin_unlock+0x134/0x8a0 [ 600.308414][T26675] kobject_add_internal+0x418/0xb50 [ 600.313623][T26675] kobject_add+0x14c/0x210 [ 600.318114][T26675] ? kobject_init+0x1d0/0x1d0 [ 600.322776][T26675] ? get_device_parent+0x2cd/0x430 [ 600.327877][T26675] device_add+0x523/0x16d0 [ 600.332430][T26675] ? virtual_device_parent+0x50/0x50 [ 600.337708][T26675] ? memcpy+0x3c/0x60 [ 600.341682][T26675] device_create+0x252/0x2e0 [ 600.346269][T26675] ? vsnprintf+0x18e/0x1d40 [ 600.350759][T26675] ? root_device_unregister+0x100/0x100 [ 600.356304][T26675] ? __percpu_counter_init+0x1fd/0x230 [ 600.361771][T26675] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 600.368102][T26675] ? dirty_writeback_centisecs_handler+0xa0/0xa0 [ 600.374595][T26675] bdi_register_va+0x86/0x530 [ 600.379266][T26675] super_setup_bdi_name+0xe0/0x1f0 [ 600.384373][T26675] ? __lock_acquire+0x2b00/0x2b00 [ 600.389387][T26675] ? vfs_get_tree+0x270/0x270 [ 600.394078][T26675] ? do_raw_spin_unlock+0x134/0x8a0 [ 600.399286][T26675] fuse_fill_super_common+0x6e1/0x11a0 [ 600.404739][T26675] ? fuse_init_fs_context_submount+0x40/0x40 [ 600.410730][T26675] ? snprintf+0xd6/0x120 [ 600.414963][T26675] ? vscnprintf+0x80/0x80 [ 600.419280][T26675] ? set_blocksize+0x1d5/0x360 [ 600.424033][T26675] fuse_fill_super+0x170/0x1e0 [ 600.428925][T26675] get_tree_bdev+0x406/0x630 [ 600.433500][T26675] ? fuse_reconfigure+0xb0/0xb0 [ 600.438351][T26675] fuse_get_tree+0x31c/0x4a0 [ 600.442945][T26675] vfs_get_tree+0x86/0x270 [ 600.447362][T26675] path_mount+0x1986/0x2c30 [ 600.452026][T26675] ? slab_free_freelist_hook+0x12e/0x1a0 [ 600.457644][T26675] ? mark_mounts_for_expiry+0x520/0x520 [ 600.463224][T26675] ? user_path_at_empty+0x149/0x1a0 [ 600.468409][T26675] ? kmem_cache_free+0xb6/0x1c0 [ 600.473246][T26675] ? user_path_at_empty+0x149/0x1a0 [ 600.478434][T26675] __se_sys_mount+0x308/0x3c0 [ 600.483101][T26675] ? vtime_user_exit+0x2b2/0x3e0 [ 600.488