last executing test programs: 6m22.523468868s ago: executing program 1 (id=1148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x200000000000000}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {}, {0x2}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 6m20.286346594s ago: executing program 1 (id=1163): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7056b8af8ff00000000bfa200000000008407020000f8ffffffb703000008000000b704000027000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x8000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0x3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x110, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000180)}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 6m18.54442648s ago: executing program 1 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40804) 6m17.61380744s ago: executing program 1 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007ff0f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r6, 0x0, 0x0, 0x480e0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m16.093241806s ago: executing program 1 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x18) getrusage(0x0, &(0x7f0000000180)) execve(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000580)={[&(0x7f0000000340)='%+9llu \x00', &(0x7f0000000400)=']\x00', &(0x7f0000000440)=']+$(^.-&\x00', &(0x7f0000000480)='mmap_lock_acquire_returned\x00']}, &(0x7f0000000740)={[&(0x7f0000000600)='\\-\x00', &(0x7f0000000640)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='mmap_lock_acquire_returned\x00', &(0x7f0000000700)='sys_enter\x00']}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000780)={@remote, 0x914, 0x0, 0xff, 0x8, 0x1, 0x7}, 0x20) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x1a) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) 6m14.095873182s ago: executing program 1 (id=1169): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b71, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 5m59.089173072s ago: executing program 32 (id=1169): socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b71, 0x0) pselect6(0x40, &(0x7f0000000000)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 4m45.963083466s ago: executing program 2 (id=1446): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x504}], 0x1}}], 0x1, 0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 4m45.098277783s ago: executing program 2 (id=1451): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x100008, 0x4, 0x8, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001940), 0x2000cc0, r0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4m44.996424048s ago: executing program 2 (id=1452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r4, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 4m44.133135165s ago: executing program 2 (id=1460): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file0\x00', 0x2048c5, &(0x7f0000000400)=ANY=[@ANYRES32=0x0], 0x0, 0x29f, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x30) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x15080, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) 4m44.080728007s ago: executing program 2 (id=1462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4m43.995038861s ago: executing program 2 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x54, 0x66, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xffff, 0xb}, {0xfff3, 0xffe0}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f0000000200)='%ps \x00'}, 0x20) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 4m43.983687231s ago: executing program 33 (id=1463): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=@getchain={0x54, 0x66, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x5}, {0xffff, 0xb}, {0xfff3, 0xffe0}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{}, &(0x7f0000000000), &(0x7f0000000200)='%ps \x00'}, 0x20) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 11.490303703s ago: executing program 4 (id=2609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2b, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x200000000000000}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1e) 11.404033517s ago: executing program 6 (id=2611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xf, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 10.320130033s ago: executing program 4 (id=2613): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 10.259359416s ago: executing program 3 (id=2615): syz_clone(0x200480, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 9.027297959s ago: executing program 3 (id=2617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = syz_clone3(&(0x7f0000000740)={0x4000000, &(0x7f0000000300), 0x0, &(0x7f0000000580), {0x19}, &(0x7f0000000680)=""/131, 0x83, &(0x7f00000008c0)=""/240, &(0x7f0000000600)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x9}, 0x58) sched_setscheduler(r1, 0x3, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xe7b, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) setitimer(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0020000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="0020e6e162a39f3b0c32110396187e0018110000b85c0ded182d7a5b5e4c9785", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) 8.854408927s ago: executing program 6 (id=2618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000b1c0)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20040044) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 8.736347582s ago: executing program 5 (id=2619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x114, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x7}, {0x2, 0x7}, {0x8, 0x2}, {0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xe2, 0x2}, {0x80, 0x4}, {0x56, 0x2}, {0x4, 0x4}, {0x26, 0x6}, {0x5, 0x5}, {0x10}, {0x3, 0x6}, {0x48, 0x4}], "5a86a9381f504d0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x2, 0x1}], "26df5da758a9dfcb"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x49, 0x5}, {0xe, 0x5}, {0xe, 0x4}, {0x9, 0x4}, {0x2, 0x6}, {0x31, 0x1}, {0x98, 0x1}, {0x2, 0x3}, {0x59, 0x7}, {0xb, 0x2}, {0x7, 0x7}, {0xb5, 0x7}, {0xfe, 0x3}, {0x7f, 0x7}, {0x6, 0x6}, {0x7d, 0x7}, {0x2, 0x7}, {0x24, 0x7}, {0x0, 0x6}, {0x8, 0x3}, {0xf, 0x5}], "d1c49e66077825ed"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8}, {0xc1, 0x5}, {0x6, 0x4}, {0xf0, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x8, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x80, 0x1}, {0x0, 0x4}, {0x62, 0x6}], "0df0a9e240913a43"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x2}, {0xdb, 0x4}, {0x8, 0x5}, {0xff, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0xb, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x8, 0x2}, {0x3, 0x1}, {0xfb, 0x5}, {0x3, 0x6}, {0x5, 0x5}, {0x2}], "1dfda3307a3e94d0"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x74, 0x6}, {0x8}, {0x80, 0x5}, {0x71, 0x3}, {0xba}, {}, {0x32, 0x4}, {0xd, 0x2}, {0xff, 0x2}, {0x3, 0x4}, {0x6, 0x6}], "119ee1ff4507e81d"}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40095}, 0x20004080) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file1\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) r6 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r6) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 8.680515144s ago: executing program 0 (id=2620): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40003020, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) signalfd4(r5, &(0x7f0000002340)={[0x2]}, 0x8, 0x80800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000d1000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r9, &(0x7f00000000c0)}, 0x20) 8.582255268s ago: executing program 4 (id=2621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x10000000, 0x4, 0x1, 0x0, 0x1, 0xb9, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x62}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 8.571791889s ago: executing program 5 (id=2622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xf, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.867907806s ago: executing program 0 (id=2623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007ff0f00"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x480e0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 5.7743752s ago: executing program 6 (id=2624): r0 = socket(0x29, 0x3, 0xafbb) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 5.718556342s ago: executing program 3 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007ff0f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x480e0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.194384272s ago: executing program 4 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007ff0f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x480e0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x40}}, 0x0) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.108252015s ago: executing program 5 (id=2627): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0x9, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) mkdir(&(0x7f0000000280)='./file1\x00', 0x205) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[], 0x15) r7 = dup(r6) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 3.107867935s ago: executing program 6 (id=2628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x114, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x7}, {0x2, 0x7}, {0x8, 0x2}, {0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xe2, 0x2}, {0x80, 0x4}, {0x56, 0x2}, {0x4, 0x4}, {0x26, 0x6}, {0x5, 0x5}, {0x10}, {0x3, 0x6}, {0x48, 0x4}], "5a86a9381f504d0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x2, 0x1}], "26df5da758a9dfcb"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x49, 0x5}, {0xe, 0x5}, {0xe, 0x4}, {0x9, 0x4}, {0x2, 0x6}, {0x31, 0x1}, {0x98, 0x1}, {0x2, 0x3}, {0x59, 0x7}, {0xb, 0x2}, {0x7, 0x7}, {0xb5, 0x7}, {0xfe, 0x3}, {0x7f, 0x7}, {0x6, 0x6}, {0x7d, 0x7}, {0x2, 0x7}, {0x24, 0x7}, {0x0, 0x6}, {0x8, 0x3}, {0xf, 0x5}], "d1c49e66077825ed"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8}, {0xc1, 0x5}, {0x6, 0x4}, {0xf0, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x8, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x80, 0x1}, {0x0, 0x4}, {0x62, 0x6}], "0df0a9e240913a43"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x2}, {0xdb, 0x4}, {0x8, 0x5}, {0xff, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0xb, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x8, 0x2}, {0x3, 0x1}, {0xfb, 0x5}, {0x3, 0x6}, {0x5, 0x5}, {0x2}], "1dfda3307a3e94d0"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x74, 0x6}, {0x8}, {0x80, 0x5}, {0x71, 0x3}, {0xba}, {}, {0x32, 0x4}, {0xd, 0x2}, {0xff, 0x2}, {0x3, 0x4}, {0x6, 0x6}], "119ee1ff4507e81d"}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40095}, 0x20004080) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file1\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.058931467s ago: executing program 3 (id=2629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xf, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 2.430839025s ago: executing program 4 (id=2630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.423157615s ago: executing program 6 (id=2631): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2.230630333s ago: executing program 0 (id=2632): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="140000000400000004000000020002"], 0x50) (fail_nth: 1) 2.216125384s ago: executing program 5 (id=2633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.876373309s ago: executing program 0 (id=2634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000b1c0)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20040044) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.657896268s ago: executing program 3 (id=2635): r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40003020, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) signalfd4(r5, &(0x7f0000002340)={[0x2]}, 0x8, 0x80800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0xe) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000002380), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0800000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000d1000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r9, &(0x7f00000000c0)}, 0x20) 1.14315296s ago: executing program 4 (id=2636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfeffff7f, 0x1}, 0x50) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000007bf9da1600010000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000004e60000000000000000000020100000000000000000000000000000000000000000000000c0015005a07350029"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087"], 0xb8}}, 0x0) 1.123349651s ago: executing program 6 (id=2637): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x2, 0x0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc", 0xf) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8949, &(0x7f0000000040)={'vlan1\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) unshare(0x20060400) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETLINKNAME(r3, 0x89e0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) 998.051797ms ago: executing program 5 (id=2638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000680)='sched_switch\x00', r3}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0xf, 0x0}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 658.006101ms ago: executing program 0 (id=2639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpgid(r0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000007ff0f00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, 0x0, 0x0, 0x480e0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 372.569584ms ago: executing program 3 (id=2640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x10000000, 0x4, 0x1, 0x0, 0x1, 0xb9, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x62}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 330.475076ms ago: executing program 0 (id=2641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x10000000, 0x4, 0x1, 0x0, 0x1, 0xb9, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x62}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r6}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r8}, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 0s ago: executing program 5 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x114, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x4, 0x7}, {0x2, 0x7}, {0x8, 0x2}, {0x3}, {0x8, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xe2, 0x2}, {0x80, 0x4}, {0x56, 0x2}, {0x4, 0x4}, {0x26, 0x6}, {0x5, 0x5}, {0x10}, {0x3, 0x6}, {0x48, 0x4}], "5a86a9381f504d0f"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x7}, {0x2, 0x1}], "26df5da758a9dfcb"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x49, 0x5}, {0xe, 0x5}, {0xe, 0x4}, {0x9, 0x4}, {0x2, 0x6}, {0x31, 0x1}, {0x98, 0x1}, {0x2, 0x3}, {0x59, 0x7}, {0xb, 0x2}, {0x7, 0x7}, {0xb5, 0x7}, {0xfe, 0x3}, {0x7f, 0x7}, {0x6, 0x6}, {0x7d, 0x7}, {0x2, 0x7}, {0x24, 0x7}, {0x0, 0x6}, {0x8, 0x3}, {0xf, 0x5}], "d1c49e66077825ed"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x8}, {0xc1, 0x5}, {0x6, 0x4}, {0xf0, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x8, 0x6}, {0x0, 0x5}, {0x0, 0x4}, {0x80, 0x1}, {0x0, 0x4}, {0x62, 0x6}], "0df0a9e240913a43"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x2}, {0xdb, 0x4}, {0x8, 0x5}, {0xff, 0x7}, {0x5, 0x7}, {0x1, 0x3}, {0xb, 0x6}, {0x2, 0x7}, {0x5, 0x5}, {0x8, 0x2}, {0x3, 0x1}, {0xfb, 0x5}, {0x3, 0x6}, {0x5, 0x5}, {0x2}], "1dfda3307a3e94d0"}}, @NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x74, 0x6}, {0x8}, {0x80, 0x5}, {0x71, 0x3}, {0xba}, {}, {0x32, 0x4}, {0xd, 0x2}, {0xff, 0x2}, {0x3, 0x4}, {0x6, 0x6}], "119ee1ff4507e81d"}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40095}, 0x20004080) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x0, 0x9}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file1\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$eJzs3d9rY1kdAPBvMv2Rdjrbru7DKuqO6+oowyRtZrcs+6DriyDLssK6TyKzpc2U0qQpTbpua8EO+Oar4IBP+if4IPggzJPvvumbLyMojDo4TAWRyE1uOm2adMq0aWaazwcuOefc2/s9J3DP6T1J7glgaF2NiN2IGIuIjyNiOi3PpFu829qS4x4/3Fnce7izmIlG48N/jqRH7iy2j2+7nJ4zF/FBkh/vEre2tb26UC6XNtJ8oV5ZL9S2tm+sVBaWS8ultWJxfm5+9u2bbxXPrK2vVX7z4Dsr7330+9998f4fd7/x46TO32rtGkvadmaBDmi9L6MxdaAseefe60ewAbiUtmds0BXhmWQj4jMR8Xqa3pcbXJ0AgP5qNKajMX0w31vmBMcAAM+/5J5/KjLZfHr/PxXZbD7fnMPLvRKT2XK1Vr9+u7q5thTNOayZGM3eXimXZtO5wpkYzST5uWb6Sb7Ykb8ZES9HxM/HJ5r5/GK1vDSof3oAYMhd7hj/H423xv8T8AkBALzIjOQAMHyOjv+jA6kHAHB+3P8DwPA5MP53+60uAHAB5Tp++w8AXHwH7v9Huh7wavzkh+dXHQDgHPj8HwCGyvfefz/ZGnvp86+XPtnaXK1+cmOpVFvNVzYX84vVjfX8crW63HxmT+Vp5ytXq+tzb8bmp4V6qVYv1La2b1Wqm2v1W83net8q+WEBAAzey6/d+3MmInbfmWhu0V7LwRcC4MJzmcPwujToCgAD0/37PsAwMB8PZJ6yv+dXhO72/puJU9QH6L9rn+sx/9/tf4M7+6n/Nc6vikCfmP+H4XW6+X+zB/AiM/8Pw6vRyFjPHwCGzAnu4H1FEC64Z/78HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYVHPLZPPpWuBTkc3m8xFXImJmYjRze6Vcmo2IlyLiT+Oj40l+btCVBgBOKfv3TLr+17XpN6Y6945l/jPefI2IH/3yw198ulCvb8wl5f/aL6/fTcuLXQOM978NAMABI50F7XG6PY631/d9/HBnsb2dZwUffLu1uGgSdy/d2lVvVT4XoxEx+e/MocZkzmhh4t07EfFqZ/uz+/tn0pVPO+Mnsa/0LX40Wzh1KH72UPxsc1/rNXkvPnsGdYFhcy/pf97tdv1l42rzNb3+Moc701z87Gjn+gza/d9eo7P/a13vH1zJNfuabv3f1ZPGePMP3+25786lxudHIvaO9L/tFaFzzdSR+CMRb3Q74U+/+Wizo+gvX/jS673iN34VcS2Oi99KFeqV9UJta/vGSmVhubRcWisW5+fmZ9+++Vax0JyjLrRnqo/6xzvXX+rd/ojJHvFzx7U/Ir7a66Qdfv3fj3/w5WPif/0r3eJn45Vj4idj4tdOGH9h8rc9l+9O4i/1aP/Iofhjh/4uKbt+wvj3/7q9dMJDAYBzUNvaXl0ol0sbEqdN5Pp15svPSQMleiT+9tGha2rg9TmTxMC6JOCcPLnoB10TAAAAAAAAAAAAAACgl9r300f+9fHHcINuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfX/wMAAP//OkHLZw==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) keyctl$search(0xa, 0x0, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r4) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) kernel console output (not intermixed with test programs): ode [ 478.825879][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 479.390945][ T7670] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 479.436496][ T7669] overlayfs: conflicting lowerdir path [ 479.956743][ T7683] overlayfs: failed to clone upperpath [ 480.843346][ T7691] syz.4.1730[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.844481][ T7691] syz.4.1730[7691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.131620][ T7694] loop0: detected capacity change from 0 to 512 [ 481.227953][ T7694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 481.247730][ T7694] ext4 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.554809][ T7703] syz.6.1737[7703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.554885][ T7703] syz.6.1737[7703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.850947][ T7713] overlayfs: conflicting lowerdir path [ 482.826137][ T7727] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 483.093803][ T7730] loop3: detected capacity change from 0 to 512 [ 483.130527][ T283] EXT4-fs (loop0): unmounting filesystem. [ 483.211177][ T7734] overlayfs: failed to clone upperpath [ 483.290419][ T7730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 483.386571][ T7730] ext4 filesystem being mounted at /350/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.185105][ T7741] overlayfs: conflicting lowerdir path [ 484.203561][ T7744] syz.4.1748[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.203632][ T7744] syz.4.1748[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.323162][ T7750] loop4: detected capacity change from 0 to 512 [ 484.613262][ T7750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 484.633876][ T7750] ext4 filesystem being mounted at /360/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.105757][ T7765] device wireguard0 entered promiscuous mode [ 485.245695][ T286] EXT4-fs (loop3): unmounting filesystem. [ 485.252874][ T285] EXT4-fs (loop4): unmounting filesystem. [ 485.462374][ T7782] device wireguard0 entered promiscuous mode [ 485.710072][ T7790] overlayfs: conflicting lowerdir path [ 487.834629][ T7806] overlayfs: failed to clone upperpath [ 487.882855][ T7815] loop0: detected capacity change from 0 to 512 [ 488.017487][ T7815] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 488.026955][ T7815] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.333542][ T7834] overlayfs: conflicting lowerdir path [ 488.558268][ T7841] cgroup: Invalid name [ 488.771155][ T283] EXT4-fs (loop0): unmounting filesystem. [ 489.509244][ T7859] device wireguard0 entered promiscuous mode [ 491.052641][ T7872] overlayfs: conflicting lowerdir path [ 491.337939][ T7884] loop6: detected capacity change from 0 to 512 [ 491.980049][ T7896] overlayfs: conflicting lowerdir path [ 492.075718][ T7884] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 492.127286][ T7884] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.197812][ T7901] loop4: detected capacity change from 0 to 512 [ 492.600106][ T7913] device wireguard1 entered promiscuous mode [ 492.693704][ T7901] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 492.743456][ T7901] ext4 filesystem being mounted at /369/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.901258][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 495.001614][ T7945] overlayfs: conflicting lowerdir path [ 495.199792][ T285] EXT4-fs (loop4): unmounting filesystem. [ 495.577935][ T7953] overlayfs: conflicting lowerdir path [ 497.232922][ T7971] overlayfs: conflicting lowerdir path [ 499.490352][ T7988] overlayfs: failed to resolve './bus': -2 [ 500.680144][ T2507] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 501.016367][ T7995] device wireguard1 entered promiscuous mode [ 502.929485][ T8023] loop6: detected capacity change from 0 to 512 [ 505.163415][ T8034] device wireguard1 entered promiscuous mode [ 505.207055][ T8023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 505.539412][ T8048] device wireguard1 entered promiscuous mode [ 505.548179][ T8023] ext4 filesystem being mounted at /73/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.628920][ T8072] device wireguard0 entered promiscuous mode [ 506.854703][ T8076] syz.3.1833[8076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.855068][ T8076] syz.3.1833[8076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.100583][ T8081] device wireguard2 entered promiscuous mode [ 507.222821][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 507.852150][ T8094] overlayfs: failed to clone upperpath [ 508.254646][ T8105] 9pnet_fd: Insufficient options for proto=fd [ 510.429070][ T8126] overlayfs: failed to resolve './bus': -2 [ 510.808404][ T8141] loop0: detected capacity change from 0 to 512 [ 510.881953][ T8143] overlayfs: failed to resolve './bus': -2 [ 511.177309][ T8141] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 511.187269][ T8141] ext4 filesystem being mounted at /349/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.836825][ T8159] overlayfs: conflicting lowerdir path [ 513.024532][ T283] EXT4-fs (loop0): unmounting filesystem. [ 513.123992][ T2507] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 513.623707][ T8173] overlayfs: failed to clone upperpath [ 514.822238][ T8183] loop6: detected capacity change from 0 to 512 [ 515.195007][ T8183] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 515.212925][ T8183] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.368958][ T8192] device wireguard0 entered promiscuous mode [ 515.844635][ T2507] usb 5-1: device not accepting address 21, error -71 [ 516.086577][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 516.125410][ T8209] syz.3.1868[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.125494][ T8209] syz.3.1868[8209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.136936][ T8216] device wireguard2 entered promiscuous mode [ 518.227577][ T6] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 518.452369][ T8243] syz.4.1874[8243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 518.452466][ T8243] syz.4.1874[8243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.715757][ T8258] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 528.343451][ T8262] syz.0.1881[8262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.343529][ T8262] syz.0.1881[8262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.375940][ T8266] overlayfs: conflicting lowerdir path [ 528.986764][ T8280] syz.0.1884[8280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.986991][ T8280] syz.0.1884[8280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 529.269876][ T8285] overlayfs: failed to clone upperpath [ 532.092013][ T8306] syz.0.1889[8306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.092085][ T8306] syz.0.1889[8306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.440942][ T8311] overlayfs: failed to resolve './bus': -2 [ 533.768363][ T8319] overlayfs: conflicting lowerdir path [ 534.014328][ T8317] syz.5.1895[8317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.014402][ T8317] syz.5.1895[8317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.060220][ T8326] loop6: detected capacity change from 0 to 512 [ 534.212950][ T8332] loop4: detected capacity change from 0 to 512 [ 534.248500][ T8326] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 534.307802][ T8339] syz.3.1898[8339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.308179][ T8339] syz.3.1898[8339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 534.376875][ T8326] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 534.523720][ T8332] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 534.705782][ T8332] ext4 filesystem being mounted at /389/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.214851][ T285] EXT4-fs (loop4): unmounting filesystem. [ 536.369739][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 536.678888][ T8368] device wireguard1 entered promiscuous mode [ 536.743716][ T8361] loop4: detected capacity change from 0 to 40427 [ 536.761068][ T8361] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 536.777589][ T8361] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 536.835550][ T8361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 537.042750][ T8361] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 537.053228][ T8361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 538.033292][ T8398] overlayfs: conflicting lowerdir path [ 538.671635][ T8400] device wireguard0 entered promiscuous mode [ 540.071855][ T1119] device bridge_slave_1 left promiscuous mode [ 540.123276][ T8419] overlayfs: failed to resolve './bus': -2 [ 540.158021][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.243328][ T1119] device bridge_slave_0 left promiscuous mode [ 540.257545][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.265766][ T1119] device veth0_vlan left promiscuous mode [ 540.615615][ T8427] syz.3.1921[8427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.615707][ T8427] syz.3.1921[8427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.141345][ T8441] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 541.195410][ T8444] overlayfs: conflicting lowerdir path [ 542.613697][ T24] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 542.626737][ T8430] loop3: detected capacity change from 0 to 40427 [ 543.015545][ T8430] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 543.039916][ T8454] device wireguard0 entered promiscuous mode [ 543.149525][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 543.518265][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 543.528418][ T8430] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 543.544610][ T24] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 543.558329][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.568493][ T24] usb 5-1: Product: syz [ 543.579094][ T8430] F2FS-fs (loop3): Found nat_bits in checkpoint [ 543.586545][ T24] usb 5-1: Manufacturer: syz [ 543.591199][ T24] usb 5-1: SerialNumber: syz [ 543.607200][ T24] usb 5-1: config 0 descriptor?? [ 543.616258][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 543.639355][ T24] hub: probe of 5-1:0.0 failed with error -5 [ 543.730018][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 543.758612][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 543.788397][ T8430] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 543.796419][ T8430] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 544.188933][ T8443] loop4: detected capacity change from 0 to 512 [ 544.276659][ T8443] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 544.457404][ T8443] EXT4-fs (loop4): invalid journal inode [ 544.473050][ T8443] EXT4-fs (loop4): can't get journal size [ 544.520664][ T8443] EXT4-fs (loop4): 1 truncate cleaned up [ 544.527499][ T8443] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 544.686942][ T2507] usb 5-1: USB disconnect, device number 23 [ 544.838131][ T8486] syz.6.1937[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.838240][ T8486] syz.6.1937[8486] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 545.092367][ T8493] loop3: detected capacity change from 0 to 512 [ 545.116469][ T285] EXT4-fs (loop4): unmounting filesystem. [ 545.167736][ T8497] loop4: detected capacity change from 0 to 512 [ 545.202870][ T8493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 545.215740][ T8497] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 545.222918][ T8493] ext4 filesystem being mounted at /394/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.226941][ T8497] ext4 filesystem being mounted at /396/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.607219][ T8507] device wireguard1 entered promiscuous mode [ 546.024098][ T8518] loop6: detected capacity change from 0 to 512 [ 546.057694][ T8518] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 546.076674][ T8518] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.203072][ T285] EXT4-fs (loop4): unmounting filesystem. [ 546.222195][ T286] EXT4-fs (loop3): unmounting filesystem. [ 546.229581][ T8525] loop4: detected capacity change from 0 to 512 [ 546.256496][ T8525] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 546.304587][ T8525] ext4 filesystem being mounted at /397/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.071364][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 547.548798][ T8556] overlayfs: failed to resolve './bus': -2 [ 548.347707][ T8561] device wireguard0 entered promiscuous mode [ 548.361682][ T285] EXT4-fs (loop4): unmounting filesystem. [ 548.387898][ T8568] loop6: detected capacity change from 0 to 512 [ 548.426713][ T8568] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 548.458991][ T8568] ext4 filesystem being mounted at /101/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.822236][ T8578] overlayfs: conflicting lowerdir path [ 549.091192][ T8586] overlayfs: conflicting lowerdir path [ 549.337507][ T8593] loop3: detected capacity change from 0 to 512 [ 549.490593][ T8593] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.498058][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 549.526879][ T8593] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.556517][ T8600] loop6: detected capacity change from 0 to 512 [ 549.662296][ T8600] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 549.671342][ T8600] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.785374][ T8610] overlayfs: failed to resolve './bus': -2 [ 550.796943][ T286] EXT4-fs (loop3): unmounting filesystem. [ 550.849122][ T8624] loop3: detected capacity change from 0 to 512 [ 550.888665][ T8624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 550.914042][ T8624] ext4 filesystem being mounted at /400/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.045556][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 551.303806][ T8633] loop6: detected capacity change from 0 to 512 [ 551.378957][ T8633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 551.387992][ T8633] ext4 filesystem being mounted at /103/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.035918][ T8649] overlayfs: failed to resolve './bus': -2 [ 552.617370][ T8651] syz.0.1977[8651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 552.617446][ T8651] syz.0.1977[8651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.100812][ T8660] overlayfs: failed to clone upperpath [ 553.214073][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 553.397174][ T286] EXT4-fs (loop3): unmounting filesystem. [ 553.619065][ T8671] overlayfs: conflicting lowerdir path [ 554.298095][ T541] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 554.609914][ T541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 554.681089][ T541] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 554.774143][ T541] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 554.854159][ T541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.925169][ T541] usb 4-1: Product: syz [ 554.963092][ T541] usb 4-1: Manufacturer: syz [ 554.973745][ T8686] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 554.997611][ T541] usb 4-1: SerialNumber: syz [ 555.066985][ T541] usb 4-1: config 0 descriptor?? [ 555.122267][ T541] hub 4-1:0.0: bad descriptor, ignoring hub [ 555.139220][ T541] hub: probe of 4-1:0.0 failed with error -5 [ 555.162518][ T541] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 555.176476][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 555.366673][ T8669] loop3: detected capacity change from 0 to 512 [ 555.979586][ T8669] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 556.319697][ T8669] EXT4-fs (loop3): invalid journal inode [ 556.325392][ T8669] EXT4-fs (loop3): can't get journal size [ 556.372463][ T8669] EXT4-fs (loop3): 1 truncate cleaned up [ 556.527833][ T8669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 556.757423][ T291] usb 4-1: USB disconnect, device number 26 [ 556.768326][ T8706] device wireguard0 entered promiscuous mode [ 556.784650][ T8703] device wireguard2 entered promiscuous mode [ 557.179108][ T8713] device wireguard1 entered promiscuous mode [ 557.235701][ T286] EXT4-fs (loop3): unmounting filesystem. [ 557.429436][ T8721] syz.3.1993[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.429513][ T8721] syz.3.1993[8721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.477906][ T8717] loop6: detected capacity change from 0 to 40427 [ 557.565998][ T8717] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 557.645456][ T8724] overlayfs: failed to clone upperpath [ 557.689514][ T8717] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 557.989618][ T8717] F2FS-fs (loop6): Found nat_bits in checkpoint [ 557.998712][ T8735] overlayfs: conflicting lowerdir path [ 558.028946][ T8717] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 558.036133][ T8717] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 558.414964][ T8746] loop6: detected capacity change from 0 to 512 [ 558.426319][ T8746] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 558.435429][ T8746] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.600162][ T8755] overlayfs: failed to resolve './bus': -2 [ 559.071539][ T8759] overlayfs: failed to clone upperpath [ 560.337173][ T8768] overlayfs: conflicting lowerdir path [ 560.344660][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 560.494104][ T8780] syz.3.2010[8780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.494152][ T8780] syz.3.2010[8780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.570486][ T8788] loop3: detected capacity change from 0 to 512 [ 560.638134][ T8788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 560.647071][ T8788] ext4 filesystem being mounted at /406/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.769727][ T8812] overlayfs: failed to resolve './bus': -2 [ 561.937760][ T8814] overlayfs: failed to resolve './bus': -2 [ 562.122970][ T286] EXT4-fs (loop3): unmounting filesystem. [ 562.408372][ T8824] overlayfs: failed to clone upperpath [ 562.783050][ T8829] syz.6.2022[8829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.783126][ T8829] syz.6.2022[8829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.921617][ T8836] device wireguard1 entered promiscuous mode [ 563.101519][ T8840] syz.6.2025[8840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.101597][ T8840] syz.6.2025[8840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.107770][ T8870] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 566.785495][ T8889] overlayfs: failed to clone upperpath [ 567.064284][ T291] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 567.230730][ T8897] loop6: detected capacity change from 0 to 512 [ 567.287408][ T8897] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 567.296374][ T8897] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.394860][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 567.415468][ T291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 567.445840][ T291] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 567.466107][ T8903] syz.5.2042[8903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.466206][ T8903] syz.5.2042[8903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.486986][ T291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.567542][ T291] usb 4-1: Product: syz [ 567.571754][ T291] usb 4-1: Manufacturer: syz [ 567.589217][ T291] usb 4-1: SerialNumber: syz [ 567.601977][ T291] usb 4-1: config 0 descriptor?? [ 567.614478][ T291] hub 4-1:0.0: bad descriptor, ignoring hub [ 567.628100][ T291] hub: probe of 4-1:0.0 failed with error -5 [ 567.687392][ T291] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 568.001574][ T8880] loop3: detected capacity change from 0 to 512 [ 568.156963][ T8880] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 568.329544][ T8880] EXT4-fs (loop3): invalid journal inode [ 568.334244][ T8248] udevd[8248]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 568.336636][ T8880] EXT4-fs (loop3): can't get journal size [ 568.359494][ T8880] EXT4-fs (loop3): 1 truncate cleaned up [ 568.365153][ T8880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 568.511580][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 568.634245][ T24] usb 4-1: USB disconnect, device number 27 [ 568.763781][ T8927] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 568.860069][ T8922] loop6: detected capacity change from 0 to 40427 [ 568.903271][ T8922] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 568.938249][ T8922] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 568.968876][ T8922] F2FS-fs (loop6): Found nat_bits in checkpoint [ 569.005922][ T8922] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 569.013147][ T8922] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 569.057309][ T286] EXT4-fs (loop3): unmounting filesystem. [ 569.210566][ T8939] loop3: detected capacity change from 0 to 512 [ 569.223475][ T8939] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 569.232539][ T8939] ext4 filesystem being mounted at /412/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.582402][ T8943] syz.0.2053[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.582519][ T8943] syz.0.2053[8943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.749545][ T8962] overlayfs: failed to clone upperpath [ 571.355357][ T8957] syz.4.2057[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.355432][ T8957] syz.4.2057[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.443228][ T8974] device wireguard0 entered promiscuous mode [ 572.525602][ T8969] device wireguard0 entered promiscuous mode [ 572.563836][ T8981] 9pnet_fd: Insufficient options for proto=fd [ 572.995840][ T286] EXT4-fs (loop3): unmounting filesystem. [ 573.016227][ T8992] 9pnet_fd: Insufficient options for proto=fd [ 573.595624][ T8989] loop6: detected capacity change from 0 to 40427 [ 574.312172][ T9005] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 574.400324][ T8989] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 574.449554][ T8989] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 574.522687][ T8989] F2FS-fs (loop6): Found nat_bits in checkpoint [ 575.236466][ T9015] device wireguard0 entered promiscuous mode [ 575.245659][ T8989] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 576.070380][ T8989] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 576.080928][ T9023] device wireguard1 entered promiscuous mode [ 576.463590][ T9026] overlayfs: failed to resolve './bus': -2 [ 577.170590][ T9054] loop6: detected capacity change from 0 to 512 [ 577.208932][ T9054] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 577.217984][ T9054] ext4 filesystem being mounted at /126/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.060050][ T9069] loop4: detected capacity change from 0 to 512 [ 578.104823][ T9071] overlayfs: failed to clone upperpath [ 578.350799][ T9069] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 578.393464][ T9069] ext4 filesystem being mounted at /429/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.621736][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 578.791540][ T9076] loop0: detected capacity change from 0 to 40427 [ 578.817163][ T9076] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 578.880996][ T9076] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 578.932532][ T9076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 579.024297][ T9076] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 579.031669][ T9076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 579.137122][ T285] EXT4-fs (loop4): unmounting filesystem. [ 579.187051][ T9100] loop4: detected capacity change from 0 to 512 [ 579.227979][ T9100] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 579.239474][ T9100] ext4 filesystem being mounted at /430/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.184398][ T9108] loop3: detected capacity change from 0 to 40427 [ 580.195190][ T9108] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 580.212793][ T9108] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 580.249009][ T9108] F2FS-fs (loop3): Found nat_bits in checkpoint [ 580.401155][ T9123] syz.0.2098[9123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.401239][ T9123] syz.0.2098[9123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.440481][ T9108] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 580.480973][ T9127] loop0: detected capacity change from 0 to 512 [ 580.488382][ T9108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 580.551425][ T9127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 580.587826][ T9127] ext4 filesystem being mounted at /395/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.687210][ T285] EXT4-fs (loop4): unmounting filesystem. [ 580.834535][ T9136] loop6: detected capacity change from 0 to 512 [ 581.306516][ T9136] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 581.326268][ T9136] ext4 filesystem being mounted at /130/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.568304][ T9146] device wireguard0 entered promiscuous mode [ 581.736193][ T283] EXT4-fs (loop0): unmounting filesystem. [ 582.826143][ T9163] overlayfs: conflicting lowerdir path [ 582.924922][ T9169] overlayfs: failed to resolve './bus': -2 [ 583.171308][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 583.972879][ T9187] syz.6.2114[9187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.972970][ T9187] syz.6.2114[9187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 584.039009][ T24] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 584.265153][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 584.289371][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 584.324430][ T24] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 584.370693][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.526736][ T24] usb 5-1: Product: syz [ 586.238333][ T24] usb 5-1: Manufacturer: syz [ 586.243079][ T24] usb 5-1: SerialNumber: syz [ 586.253329][ T24] usb 5-1: config 0 descriptor?? [ 586.355499][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 586.361483][ T24] hub: probe of 5-1:0.0 failed with error -5 [ 586.524169][ T24] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 586.564685][ T8246] udevd[8246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 587.301817][ T6] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 587.514606][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 587.536365][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 587.568231][ T6] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 587.598839][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.607092][ T6] usb 4-1: Product: syz [ 587.632972][ T6] usb 4-1: Manufacturer: syz [ 587.637593][ T6] usb 4-1: SerialNumber: syz [ 587.667346][ T6] usb 4-1: config 0 descriptor?? [ 587.686408][ T6] hub 4-1:0.0: bad descriptor, ignoring hub [ 587.713921][ T6] hub: probe of 4-1:0.0 failed with error -5 [ 587.734100][ T6] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 587.765141][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 587.992955][ T24] usb 5-1: USB disconnect, device number 24 [ 588.111603][ T9201] loop3: detected capacity change from 0 to 512 [ 588.139404][ T9201] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 588.633195][ T9201] EXT4-fs (loop3): invalid journal inode [ 588.662793][ T9201] EXT4-fs (loop3): can't get journal size [ 588.808815][ T9201] EXT4-fs (loop3): 1 truncate cleaned up [ 588.815650][ T9201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 588.988789][ T6] usb 4-1: USB disconnect, device number 28 [ 589.877673][ T9221] device wireguard2 entered promiscuous mode [ 590.184395][ T9224] overlayfs: failed to resolve './bus': -2 [ 590.363597][ T286] EXT4-fs (loop3): unmounting filesystem. [ 590.898662][ T9240] overlayfs: failed to resolve './bus': -2 [ 591.975297][ T9248] device wireguard1 entered promiscuous mode [ 592.148420][ T9257] loop0: detected capacity change from 0 to 512 [ 592.208382][ T9257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 592.218529][ T9257] ext4 filesystem being mounted at /403/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.356389][ T2702] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 592.999830][ T2702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 593.321429][ T9286] overlayfs: failed to resolve './file1': -2 [ 593.355790][ T2702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 593.769284][ T9288] overlayfs: failed to clone upperpath [ 594.455825][ T2702] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 594.536251][ T2702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.595680][ T2702] usb 4-1: Product: syz [ 594.599994][ T2702] usb 4-1: Manufacturer: syz [ 594.604687][ T2702] usb 4-1: SerialNumber: syz [ 594.634162][ T2702] usb 4-1: config 0 descriptor?? [ 594.647507][ T2702] hub 4-1:0.0: bad descriptor, ignoring hub [ 594.653474][ T2702] hub: probe of 4-1:0.0 failed with error -5 [ 594.820675][ T2702] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 594.870894][ T9254] loop3: detected capacity change from 0 to 512 [ 594.990348][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 595.011515][ T9254] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 595.146921][ T9254] EXT4-fs (loop3): invalid journal inode [ 595.159520][ T9254] EXT4-fs (loop3): can't get journal size [ 595.179514][ T9254] EXT4-fs (loop3): 1 truncate cleaned up [ 595.185185][ T9254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 595.227188][ T283] EXT4-fs (loop0): unmounting filesystem. [ 595.339136][ T2702] usb 4-1: USB disconnect, device number 29 [ 595.345126][ T9302] device wireguard0 entered promiscuous mode [ 595.435755][ T9307] device wireguard1 entered promiscuous mode [ 595.759719][ T286] EXT4-fs (loop3): unmounting filesystem. [ 596.049095][ T9316] syz.3.2147[9316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.049172][ T9316] syz.3.2147[9316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.371784][ T28] audit: type=1400 audit(1764192035.870:340): avc: denied { ioctl } for pid=9318 comm="syz.5.2148" path="socket:[43847]" dev="sockfs" ino=43847 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 596.465565][ T9321] syz.5.2148[9321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.466460][ T9321] syz.5.2148[9321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.618336][ T9327] loop6: detected capacity change from 0 to 512 [ 596.757521][ T9327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 596.768768][ T9327] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.225475][ T9335] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 598.067784][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 598.263583][ T9353] loop6: detected capacity change from 0 to 256 [ 598.273189][ T28] audit: type=1400 audit(1764192037.656:341): avc: denied { remount } for pid=9347 comm="syz.6.2156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 599.318027][ T9368] overlayfs: failed to resolve './bus': -2 [ 599.477241][ T9370] loop4: detected capacity change from 0 to 512 [ 599.512368][ T9370] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 599.521555][ T9370] ext4 filesystem being mounted at /444/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 599.811435][ T9379] loop0: detected capacity change from 0 to 512 [ 599.862223][ T9379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 599.871829][ T9379] ext4 filesystem being mounted at /409/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.207841][ T9389] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 600.695946][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.703180][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.745422][ T283] EXT4-fs (loop0): unmounting filesystem. [ 600.782299][ T9390] device wireguard0 left promiscuous mode [ 600.868188][ T285] EXT4-fs (loop4): unmounting filesystem. [ 601.138226][ T9401] device wireguard1 entered promiscuous mode [ 602.126467][ T9408] overlayfs: conflicting lowerdir path [ 602.474730][ T9418] overlayfs: conflicting lowerdir path [ 602.725390][ T9420] syz.0.2170[9420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.726364][ T9420] syz.0.2170[9420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.846391][ T9434] overlayfs: failed to clone upperpath [ 603.866390][ T24] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 605.827557][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 605.853317][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 605.876218][ T24] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 605.911563][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.942968][ T24] usb 7-1: Product: syz [ 605.948488][ T24] usb 7-1: Manufacturer: syz [ 605.956674][ T9447] device wireguard2 entered promiscuous mode [ 605.965857][ T24] usb 7-1: SerialNumber: syz [ 605.974499][ T24] usb 7-1: config 0 descriptor?? [ 606.019232][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 606.025150][ T24] hub: probe of 7-1:0.0 failed with error -5 [ 606.048661][ T24] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 606.126083][ T8246] udevd[8246]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 606.250422][ T9428] loop6: detected capacity change from 0 to 512 [ 606.296855][ T9428] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 606.316456][ T9428] EXT4-fs (loop6): invalid journal inode [ 606.330943][ T9428] EXT4-fs (loop6): can't get journal size [ 606.370472][ T9428] EXT4-fs (loop6): 1 truncate cleaned up [ 606.382394][ T9428] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 606.564164][ T291] usb 7-1: USB disconnect, device number 5 [ 607.074725][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 607.219649][ T9464] overlayfs: failed to clone upperpath [ 607.736228][ T9472] device wireguard2 entered promiscuous mode [ 607.925823][ T9476] overlayfs: conflicting lowerdir path [ 608.806689][ T9485] overlayfs: failed to resolve './bus': -2 [ 610.818743][ T9507] device wireguard1 entered promiscuous mode [ 610.955525][ T9515] loop3: detected capacity change from 0 to 512 [ 611.146080][ T9515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 611.171176][ T9515] ext4 filesystem being mounted at /433/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.318280][ T9526] device wireguard0 entered promiscuous mode [ 611.384209][ T9527] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 611.692746][ T9535] overlayfs: failed to resolve './bus': -2 [ 612.082917][ T286] EXT4-fs (loop3): unmounting filesystem. [ 612.904596][ T9551] overlayfs: conflicting lowerdir path [ 613.045050][ T9555] loop0: detected capacity change from 0 to 512 [ 613.146942][ T9555] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 613.157645][ T9555] ext4 filesystem being mounted at /416/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.946301][ T283] EXT4-fs (loop0): unmounting filesystem. [ 615.141087][ T9596] loop3: detected capacity change from 0 to 40427 [ 615.161900][ T9596] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 615.179597][ T9596] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 615.191173][ T9596] F2FS-fs (loop3): Found nat_bits in checkpoint [ 615.228663][ T9596] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 615.236821][ T9596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 615.304711][ T9605] loop4: detected capacity change from 0 to 512 [ 615.387741][ T9605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 615.397234][ T9605] ext4 filesystem being mounted at /456/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.433542][ T9614] loop6: detected capacity change from 0 to 512 [ 615.450341][ T9614] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 615.459671][ T9614] ext4 filesystem being mounted at /154/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.778346][ T9625] overlayfs: failed to clone upperpath [ 616.238096][ T9631] device wireguard1 entered promiscuous mode [ 616.249696][ T285] EXT4-fs (loop4): unmounting filesystem. [ 616.388320][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 616.421351][ T4158] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 616.743589][ T4158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 616.782063][ T9636] device wireguard2 entered promiscuous mode [ 617.016355][ T4158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 617.129897][ T9645] overlayfs: missing 'lowerdir' [ 617.137622][ T4158] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 617.146669][ T4158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.179829][ T4158] usb 4-1: Product: syz [ 617.184014][ T4158] usb 4-1: Manufacturer: syz [ 617.188642][ T4158] usb 4-1: SerialNumber: syz [ 617.205911][ T4158] usb 4-1: config 0 descriptor?? [ 617.217802][ T4158] hub 4-1:0.0: bad descriptor, ignoring hub [ 617.224087][ T4158] hub: probe of 4-1:0.0 failed with error -5 [ 617.245475][ T4158] snd-usb-audio: probe of 4-1:0.0 failed with error -12 [ 617.255604][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 617.484839][ T9630] loop3: detected capacity change from 0 to 512 [ 617.505054][ T9630] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 617.514224][ T9630] EXT4-fs (loop3): invalid journal inode [ 617.520056][ T9630] EXT4-fs (loop3): can't get journal size [ 617.527266][ T9630] EXT4-fs (loop3): 1 truncate cleaned up [ 617.533700][ T9630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 617.671677][ T6] usb 4-1: USB disconnect, device number 30 [ 617.980551][ T9662] device wireguard0 entered promiscuous mode [ 618.102360][ T286] EXT4-fs (loop3): unmounting filesystem. [ 618.658715][ T9681] device wireguard2 entered promiscuous mode [ 620.463399][ T9704] overlayfs: conflicting lowerdir path [ 621.030355][ T9710] device wireguard0 entered promiscuous mode [ 621.216422][ T9712] overlayfs: conflicting lowerdir path [ 621.479725][ T9728] __nla_validate_parse: 60 callbacks suppressed [ 621.479742][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 621.497866][ T9728] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.744753][ T4158] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 621.938702][ T4158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 621.950903][ T4158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 621.967336][ T4158] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 621.977469][ T4158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.988693][ T4158] usb 7-1: Product: syz [ 622.001246][ T4158] usb 7-1: Manufacturer: syz [ 622.006097][ T4158] usb 7-1: SerialNumber: syz [ 622.015458][ T4158] usb 7-1: config 0 descriptor?? [ 622.023001][ T4158] hub 7-1:0.0: bad descriptor, ignoring hub [ 622.028905][ T4158] hub: probe of 7-1:0.0 failed with error -5 [ 622.055608][ T4158] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 622.070115][ T8246] udevd[8246]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 622.262249][ T9717] loop6: detected capacity change from 0 to 512 [ 622.274643][ T9717] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 622.283731][ T9717] EXT4-fs (loop6): invalid journal inode [ 622.294431][ T9717] EXT4-fs (loop6): can't get journal size [ 622.317497][ T9717] EXT4-fs (loop6): 1 truncate cleaned up [ 622.324396][ T9717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 622.448466][ T9750] fuse: Unknown parameter '00000000000000000000003' [ 622.537755][ T9753] device wireguard2 entered promiscuous mode [ 622.669359][ T6] usb 7-1: USB disconnect, device number 6 [ 622.868490][ T9762] loop4: detected capacity change from 0 to 512 [ 622.911527][ T9762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 622.920598][ T9762] ext4 filesystem being mounted at /465/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.119355][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 623.252113][ T9771] overlayfs: conflicting lowerdir path [ 623.516781][ T9776] device wireguard2 entered promiscuous mode [ 623.747873][ T9782] overlayfs: missing 'workdir' [ 624.686261][ T9785] device wireguard2 entered promiscuous mode [ 625.200082][ T9802] device wireguard1 entered promiscuous mode [ 625.339822][ T285] EXT4-fs (loop4): unmounting filesystem. [ 625.358738][ T9804] overlayfs: failed to clone upperpath [ 625.911182][ T28] audit: type=1400 audit(1764192063.501:342): avc: denied { ioctl } for pid=9814 comm="syz.6.2272" path="socket:[44613]" dev="sockfs" ino=44613 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 625.956806][ T28] audit: type=1400 audit(1764192063.548:343): avc: denied { read } for pid=9814 comm="syz.6.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 626.922387][ T9833] overlayfs: conflicting lowerdir path [ 627.151941][ T9845] overlayfs: conflicting lowerdir path [ 627.200311][ T6] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 627.400091][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 627.406493][ T6] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 627.416455][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 627.427514][ T6] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 627.438870][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.447989][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.456057][ T6] usb 5-1: Product: syz [ 627.460241][ T6] usb 5-1: Manufacturer: syz [ 627.464862][ T6] usb 5-1: SerialNumber: syz [ 627.796818][ T9826] loop4: detected capacity change from 0 to 40427 [ 627.807887][ T9826] F2FS-fs (loop4): fault_injection options not supported [ 627.814995][ T9826] F2FS-fs (loop4): Image doesn't support compression [ 627.856923][ T9826] F2FS-fs (loop4): Image doesn't support compression [ 627.871153][ T9826] F2FS-fs (loop4): invalid crc value [ 627.877778][ T9826] F2FS-fs (loop4): Found nat_bits in checkpoint [ 627.954358][ T9826] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 628.001021][ T9826] syz.4.2275: attempt to access beyond end of device [ 628.001021][ T9826] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 628.020106][ T28] audit: type=1400 audit(1764192065.466:344): avc: denied { create } for pid=9825 comm="syz.4.2275" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 628.796492][ T6] usb 5-1: USB disconnect, device number 25 [ 628.955902][ T9872] loop6: detected capacity change from 0 to 512 [ 628.973509][ T9872] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 628.999928][ T9872] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.224536][ T9879] device wireguard1 entered promiscuous mode [ 629.271554][ T9867] loop3: detected capacity change from 0 to 40427 [ 629.282798][ T9867] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 629.290602][ T9867] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 629.319112][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 629.336405][ T9867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 629.420994][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 629.440239][ T285] syz-executor: attempt to access beyond end of device [ 629.440239][ T285] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 629.464946][ T9892] loop0: detected capacity change from 0 to 256 [ 629.473729][ T9867] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 629.623812][ T9867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 629.684231][ T9892] FAT-fs (loop0): Directory bread(block 64) failed [ 629.719025][ T9892] FAT-fs (loop0): Directory bread(block 65) failed [ 629.747534][ T9892] FAT-fs (loop0): Directory bread(block 66) failed [ 629.762738][ T9892] FAT-fs (loop0): Directory bread(block 67) failed [ 629.770884][ T9892] FAT-fs (loop0): Directory bread(block 68) failed [ 629.794851][ T9892] FAT-fs (loop0): Directory bread(block 69) failed [ 629.801701][ T9892] FAT-fs (loop0): Directory bread(block 70) failed [ 629.811788][ T9892] FAT-fs (loop0): Directory bread(block 71) failed [ 629.827182][ T9892] FAT-fs (loop0): Directory bread(block 72) failed [ 629.841348][ T9892] FAT-fs (loop0): Directory bread(block 73) failed [ 630.039024][ T9903] FAULT_INJECTION: forcing a failure. [ 630.039024][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 630.051691][ T9903] CPU: 1 PID: 9903 Comm: syz.0.2290 Not tainted syzkaller #0 [ 630.059063][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 630.069115][ T9903] Call Trace: [ 630.072390][ T9903] [ 630.075312][ T9903] __dump_stack+0x21/0x24 [ 630.079645][ T9903] dump_stack_lvl+0xee/0x150 [ 630.084228][ T9903] ? __cfi_dump_stack_lvl+0x8/0x8 [ 630.089248][ T9903] dump_stack+0x15/0x24 [ 630.093398][ T9903] should_fail_ex+0x3d4/0x520 [ 630.098075][ T9903] ? getname_flags+0xb9/0x500 [ 630.102743][ T9903] __should_failslab+0xac/0xf0 [ 630.107504][ T9903] should_failslab+0x9/0x20 [ 630.112002][ T9903] kmem_cache_alloc+0x3b/0x330 [ 630.116771][ T9903] getname_flags+0xb9/0x500 [ 630.121362][ T9903] __x64_sys_mkdirat+0x7c/0xa0 [ 630.126133][ T9903] x64_sys_call+0x73d/0x9a0 [ 630.130637][ T9903] do_syscall_64+0x4c/0xa0 [ 630.135055][ T9903] ? clear_bhb_loop+0x30/0x80 [ 630.139740][ T9903] ? clear_bhb_loop+0x30/0x80 [ 630.144434][ T9903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.150340][ T9903] RIP: 0033:0x7f57d898de97 [ 630.154759][ T9903] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.174365][ T9903] RSP: 002b:00007f57d989be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 630.182788][ T9903] RAX: ffffffffffffffda RBX: 00007f57d989bef0 RCX: 00007f57d898de97 [ 630.190766][ T9903] RDX: 00000000000001ff RSI: 0000200000000600 RDI: 00000000ffffff9c [ 630.198732][ T9903] RBP: 0000200000000240 R08: 0000200000000100 R09: 0000000000000000 [ 630.206694][ T9903] R10: 0000200000000240 R11: 0000000000000246 R12: 0000200000000600 [ 630.214656][ T9903] R13: 00007f57d989beb0 R14: 0000000000000000 R15: 0000000000000000 [ 630.222616][ T9903] [ 630.231298][ T9905] overlayfs: failed to resolve './bus': -2 [ 630.257808][ T9907] loop6: detected capacity change from 0 to 512 [ 630.280272][ T9907] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2293: bg 0: block 393: padding at end of block bitmap is not set [ 630.323252][ T9907] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 630.332374][ T9907] EXT4-fs (loop6): 2 truncates cleaned up [ 630.338148][ T9907] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 630.460316][ T9917] overlayfs: failed to clone upperpath [ 630.972700][ T28] audit: type=1400 audit(1764192068.244:345): avc: denied { wake_alarm } for pid=9926 comm="syz.3.2297" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.996708][ T9925] overlayfs: conflicting lowerdir path [ 631.292496][ T9927] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2297'. [ 631.302946][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 631.522030][ T9939] overlayfs: failed to resolve './bus': -2 [ 632.484344][ T9945] loop4: detected capacity change from 0 to 256 [ 632.497388][ T9946] loop3: detected capacity change from 0 to 512 [ 632.537953][ T9946] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 632.553826][ T9945] FAT-fs (loop4): Directory bread(block 64) failed [ 632.575758][ T9945] FAT-fs (loop4): Directory bread(block 65) failed [ 632.603459][ T9945] FAT-fs (loop4): Directory bread(block 66) failed [ 632.614121][ T9946] EXT4-fs (loop3): 1 orphan inode deleted [ 632.627808][ T9945] FAT-fs (loop4): Directory bread(block 67) failed [ 632.634365][ T9946] EXT4-fs (loop3): 1 truncate cleaned up [ 632.642305][ T9946] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 632.651273][ T9945] FAT-fs (loop4): Directory bread(block 68) failed [ 632.657825][ T9945] FAT-fs (loop4): Directory bread(block 69) failed [ 632.664715][ T9945] FAT-fs (loop4): Directory bread(block 70) failed [ 632.671286][ T9945] FAT-fs (loop4): Directory bread(block 71) failed [ 632.677870][ T9945] FAT-fs (loop4): Directory bread(block 72) failed [ 632.684826][ T9945] FAT-fs (loop4): Directory bread(block 73) failed [ 632.747531][ T9946] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.2301: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 632.766816][ T28] audit: type=1400 audit(1764192069.909:346): avc: denied { create } for pid=9943 comm="syz.3.2301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 632.905953][ T9946] EXT4-fs (loop3): Remounting filesystem read-only [ 633.147639][ T9958] FAULT_INJECTION: forcing a failure. [ 633.147639][ T9958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.160797][ T9958] CPU: 1 PID: 9958 Comm: syz.4.2302 Not tainted syzkaller #0 [ 633.168172][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 633.178395][ T9958] Call Trace: [ 633.181669][ T9958] [ 633.184591][ T9958] __dump_stack+0x21/0x24 [ 633.188943][ T9958] dump_stack_lvl+0xee/0x150 [ 633.193527][ T9958] ? __cfi_dump_stack_lvl+0x8/0x8 [ 633.198547][ T9958] dump_stack+0x15/0x24 [ 633.202694][ T9958] should_fail_ex+0x3d4/0x520 [ 633.207371][ T9958] should_fail+0xb/0x10 [ 633.211532][ T9958] should_fail_usercopy+0x1a/0x20 [ 633.216560][ T9958] _copy_from_user+0x1e/0xc0 [ 633.221153][ T9958] __sys_bpf+0x277/0x780 [ 633.225388][ T9958] ? bpf_link_show_fdinfo+0x320/0x320 [ 633.230751][ T9958] ? fpregs_restore_userregs+0x128/0x260 [ 633.236374][ T9958] __x64_sys_bpf+0x7c/0x90 [ 633.240788][ T9958] x64_sys_call+0x488/0x9a0 [ 633.245277][ T9958] do_syscall_64+0x4c/0xa0 [ 633.249684][ T9958] ? clear_bhb_loop+0x30/0x80 [ 633.254346][ T9958] ? clear_bhb_loop+0x30/0x80 [ 633.259017][ T9958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.264944][ T9958] RIP: 0033:0x7ff0ef18f749 [ 633.269337][ T9958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.288933][ T9958] RSP: 002b:00007ff0eff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.297328][ T9958] RAX: ffffffffffffffda RBX: 00007ff0ef3e6180 RCX: 00007ff0ef18f749 [ 633.305294][ T9958] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 0000000000000000 [ 633.313243][ T9958] RBP: 00007ff0eff4d090 R08: 0000000000000000 R09: 0000000000000000 [ 633.321191][ T9958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.329139][ T9958] R13: 00007ff0ef3e6218 R14: 00007ff0ef3e6180 R15: 00007ffd0ba21308 [ 633.337094][ T9958] [ 633.601073][ T286] EXT4-fs (loop3): unmounting filesystem. [ 633.610643][ T9960] device wireguard1 entered promiscuous mode [ 633.651669][ T9971] IPv6: sit2: Disabled Multicast RS [ 633.705296][ T9972] netlink: 'syz.3.2309': attribute type 12 has an invalid length. [ 633.713263][ T9972] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 633.722077][ T9972] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2309'. [ 633.731844][ T9972] netlink: 35 bytes leftover after parsing attributes in process `syz.3.2309'. [ 633.845418][ T9976] loop6: detected capacity change from 0 to 128 [ 633.912153][ T6] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 634.029798][ T9985] overlayfs: failed to resolve './bus': -2 [ 634.108214][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 634.121362][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 634.140158][ T6] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 634.150366][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.158593][ T6] usb 5-1: Product: syz [ 634.163500][ T6] usb 5-1: Manufacturer: syz [ 634.168267][ T6] usb 5-1: SerialNumber: syz [ 634.180270][ T6] usb 5-1: config 0 descriptor?? [ 634.195113][ T6] hub 5-1:0.0: bad descriptor, ignoring hub [ 634.201661][ T6] hub: probe of 5-1:0.0 failed with error -5 [ 634.247776][ T6] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 634.288506][ T8246] udevd[8246]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 634.618540][ T9967] loop4: detected capacity change from 0 to 512 [ 634.764679][ T9967] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 634.886756][ T28] audit: type=1326 audit(1764192071.901:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.5.2314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a5e78f749 code=0x0 [ 634.911140][ T9967] EXT4-fs (loop4): invalid journal inode [ 634.920034][ T9967] EXT4-fs (loop4): can't get journal size [ 634.937362][ T9967] EXT4-fs (loop4): 1 truncate cleaned up [ 634.946498][ T9967] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 635.129492][ T4158] usb 5-1: USB disconnect, device number 26 [ 635.660942][ T285] EXT4-fs (loop4): unmounting filesystem. [ 635.767265][T10011] loop4: detected capacity change from 0 to 1024 [ 635.792765][T10011] EXT4-fs: Ignoring removed i_version option [ 635.805523][T10011] EXT4-fs (loop4): Test dummy encryption mode enabled [ 635.825984][T10011] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 636.464665][T10028] device wireguard2 entered promiscuous mode [ 636.759067][T10048] loop3: detected capacity change from 0 to 512 [ 636.843058][T10048] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 636.862805][T10048] EXT4-fs (loop3): invalid journal inode [ 636.880941][T10048] EXT4-fs (loop3): can't get journal size [ 636.945579][T10048] EXT4-fs (loop3): 1 truncate cleaned up [ 636.951548][T10048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 636.994821][ T285] EXT4-fs (loop4): unmounting filesystem. [ 637.035125][T10055] loop4: detected capacity change from 0 to 512 [ 637.056510][T10055] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 637.066019][T10055] ext4 filesystem being mounted at /473/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.103894][ T285] EXT4-fs (loop4): unmounting filesystem. [ 637.830852][ T286] EXT4-fs (loop3): unmounting filesystem. [ 637.970264][ T24] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 638.075987][T10073] loop0: detected capacity change from 0 to 512 [ 638.210622][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 638.220164][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 638.229185][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 638.239654][ T24] usb 5-1: config 1 has no interface number 1 [ 638.251960][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 638.268589][T10073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 638.279561][T10073] ext4 filesystem being mounted at /440/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.290176][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 638.300636][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.311786][ T24] usb 5-1: Product: syz [ 638.316090][ T24] usb 5-1: Manufacturer: syz [ 638.320713][ T24] usb 5-1: SerialNumber: syz [ 638.336168][ T283] EXT4-fs (loop0): unmounting filesystem. [ 638.487043][T10084] loop0: detected capacity change from 0 to 40427 [ 638.494194][T10084] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 638.502214][T10084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 638.515017][T10084] F2FS-fs (loop0): Found nat_bits in checkpoint [ 638.539264][T10084] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 638.548609][T10084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 638.560116][T10063] syz.4.2334 uses obsolete (PF_INET,SOCK_PACKET) [ 638.893824][T10094] FAULT_INJECTION: forcing a failure. [ 638.893824][T10094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.906969][T10094] CPU: 1 PID: 10094 Comm: syz.6.2342 Not tainted syzkaller #0 [ 638.914428][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 638.924469][T10094] Call Trace: [ 638.927733][T10094] [ 638.930656][T10094] __dump_stack+0x21/0x24 [ 638.935057][T10094] dump_stack_lvl+0xee/0x150 [ 638.939626][T10094] ? __cfi_dump_stack_lvl+0x8/0x8 [ 638.944627][T10094] ? __stack_depot_save+0x36/0x480 [ 638.949716][T10094] dump_stack+0x15/0x24 [ 638.953852][T10094] should_fail_ex+0x3d4/0x520 [ 638.958510][T10094] should_fail+0xb/0x10 [ 638.962648][T10094] should_fail_usercopy+0x1a/0x20 [ 638.967659][T10094] _copy_from_iter+0x190/0xfd0 [ 638.972410][T10094] ? __kasan_check_write+0x14/0x20 [ 638.977499][T10094] ? ldsem_down_read+0x158/0x6b0 [ 638.982423][T10094] ? __cfi_ldsem_down_read+0x10/0x10 [ 638.987689][T10094] ? __cfi__copy_from_iter+0x10/0x10 [ 638.992956][T10094] ? __kasan_check_write+0x14/0x20 [ 638.998045][T10094] ? mutex_trylock+0xdb/0x210 [ 639.002709][T10094] ? check_stack_object+0x81/0x140 [ 639.007805][T10094] ? __check_object_size+0x45a/0x600 [ 639.013072][T10094] file_tty_write+0x4ac/0x890 [ 639.017728][T10094] ? __cfi_n_tty_write+0x10/0x10 [ 639.022649][T10094] tty_write+0x3c/0x50 [ 639.026695][T10094] vfs_write+0x5db/0xca0 [ 639.030919][T10094] ? slab_free_freelist_hook+0xc2/0x190 [ 639.036448][T10094] ? __cfi_vfs_write+0x10/0x10 [ 639.041197][T10094] ? __fget_files+0x2d5/0x330 [ 639.045850][T10094] ? __fdget_pos+0x1f2/0x380 [ 639.050436][T10094] ? ksys_write+0x71/0x240 [ 639.054833][T10094] ksys_write+0x140/0x240 [ 639.059144][T10094] ? __cfi_ksys_write+0x10/0x10 [ 639.063975][T10094] ? debug_smp_processor_id+0x17/0x20 [ 639.069329][T10094] __x64_sys_write+0x7b/0x90 [ 639.073904][T10094] x64_sys_call+0x27b/0x9a0 [ 639.078388][T10094] do_syscall_64+0x4c/0xa0 [ 639.082786][T10094] ? clear_bhb_loop+0x30/0x80 [ 639.087456][T10094] ? clear_bhb_loop+0x30/0x80 [ 639.092117][T10094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.098003][T10094] RIP: 0033:0x7f013b38f749 [ 639.102418][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.122115][T10094] RSP: 002b:00007f013c1d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 639.130514][T10094] RAX: ffffffffffffffda RBX: 00007f013b5e6090 RCX: 00007f013b38f749 [ 639.138486][T10094] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000009 [ 639.146436][T10094] RBP: 00007f013c1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 639.154383][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.162348][T10094] R13: 00007f013b5e6128 R14: 00007f013b5e6090 R15: 00007ffc226688b8 [ 639.170314][T10094] [ 639.469774][ T4158] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 639.663331][ T4158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.679153][ T4158] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.694522][ T4158] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.708119][ T4158] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 639.717367][ T4158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.746777][ T4158] usb 4-1: config 0 descriptor?? [ 640.068449][ T541] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 640.188105][ T4158] usbhid 4-1:0.0: can't add hid device: -71 [ 640.195748][ T4158] usbhid: probe of 4-1:0.0 failed with error -71 [ 640.204018][ T4158] usb 4-1: USB disconnect, device number 31 [ 640.305185][ T541] usb 7-1: unable to get BOS descriptor or descriptor too short [ 640.313264][ T541] usb 7-1: not running at top speed; connect to a high speed hub [ 640.321752][ T541] usb 7-1: config 1 has an invalid interface number: 138 but max is 0 [ 640.330103][ T541] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.340256][ T541] usb 7-1: config 1 has no interface number 0 [ 640.346416][ T541] usb 7-1: config 1 interface 138 has no altsetting 0 [ 640.354723][ T541] usb 7-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 640.363841][ T541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.371886][ T541] usb 7-1: Product: syz [ 640.376082][ T541] usb 7-1: Manufacturer: syz [ 640.380802][ T541] usb 7-1: SerialNumber: syz [ 640.402757][ T24] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 640.413196][T10117] loop4: detected capacity change from 0 to 512 [ 640.466905][ T24] usb 5-1: USB disconnect, device number 27 [ 640.474100][T10117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 640.485303][T10117] ext4 filesystem being mounted at /475/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.512909][ T285] EXT4-fs (loop4): unmounting filesystem. [ 640.683685][ T541] usb 7-1: USB disconnect, device number 7 [ 640.756344][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 640.891956][T10129] overlayfs: failed to resolve './bus': -2 [ 641.172205][ T8246] udevd[8246]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.138/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 641.506540][T10145] loop0: detected capacity change from 0 to 256 [ 641.518689][T10145] FAT-fs (loop0): Directory bread(block 64) failed [ 641.528104][T10145] FAT-fs (loop0): Directory bread(block 65) failed [ 641.535129][T10145] FAT-fs (loop0): Directory bread(block 66) failed [ 641.541660][T10145] FAT-fs (loop0): Directory bread(block 67) failed [ 641.548391][T10145] FAT-fs (loop0): Directory bread(block 68) failed [ 641.555184][T10145] FAT-fs (loop0): Directory bread(block 69) failed [ 641.561939][T10145] FAT-fs (loop0): Directory bread(block 70) failed [ 641.569365][T10145] FAT-fs (loop0): Directory bread(block 71) failed [ 641.576307][T10145] FAT-fs (loop0): Directory bread(block 72) failed [ 641.583941][T10145] FAT-fs (loop0): Directory bread(block 73) failed [ 642.205862][T10153] FAULT_INJECTION: forcing a failure. [ 642.205862][T10153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.219044][T10153] CPU: 1 PID: 10153 Comm: syz.6.2356 Not tainted syzkaller #0 [ 642.226501][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.236541][T10153] Call Trace: [ 642.239804][T10153] [ 642.242717][T10153] __dump_stack+0x21/0x24 [ 642.247034][T10153] dump_stack_lvl+0xee/0x150 [ 642.251610][T10153] ? __cfi_dump_stack_lvl+0x8/0x8 [ 642.256621][T10153] dump_stack+0x15/0x24 [ 642.260767][T10153] should_fail_ex+0x3d4/0x520 [ 642.265430][T10153] should_fail+0xb/0x10 [ 642.269577][T10153] should_fail_usercopy+0x1a/0x20 [ 642.274587][T10153] _copy_from_user+0x1e/0xc0 [ 642.279163][T10153] __sys_sendto+0x2c0/0x5e0 [ 642.283647][T10153] ? __cfi___sys_sendto+0x10/0x10 [ 642.288654][T10153] ? __kasan_check_read+0x11/0x20 [ 642.293656][T10153] ? preempt_schedule_irq+0xbb/0x110 [ 642.298924][T10153] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 642.304970][T10153] ? sysvec_reschedule_ipi+0x78/0x80 [ 642.310240][T10153] __x64_sys_sendto+0xe5/0x100 [ 642.315069][T10153] x64_sys_call+0x83/0x9a0 [ 642.319464][T10153] do_syscall_64+0x4c/0xa0 [ 642.323859][T10153] ? clear_bhb_loop+0x30/0x80 [ 642.328517][T10153] ? clear_bhb_loop+0x30/0x80 [ 642.333178][T10153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.339049][T10153] RIP: 0033:0x7f013b38f749 [ 642.343450][T10153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.363041][T10153] RSP: 002b:00007f013c1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 642.371433][T10153] RAX: ffffffffffffffda RBX: 00007f013b5e6180 RCX: 00007f013b38f749 [ 642.379386][T10153] RDX: 000000000000100f RSI: 00002000000002c0 RDI: 0000000000000005 [ 642.387419][T10153] RBP: 00007f013c1b0090 R08: 0000200000000140 R09: 0000000000000014 [ 642.395367][T10153] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 642.403330][T10153] R13: 00007f013b5e6218 R14: 00007f013b5e6180 R15: 00007ffc226688b8 [ 642.411297][T10153] [ 642.826425][T10162] device wireguard3 entered promiscuous mode [ 643.099203][T10167] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 643.383940][T10170] syz.0.2355: attempt to access beyond end of device [ 643.383940][T10170] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 644.376893][T10186] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 645.615331][T10213] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 646.060738][T10219] FAULT_INJECTION: forcing a failure. [ 646.060738][T10219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.091065][T10219] CPU: 1 PID: 10219 Comm: syz.4.2375 Not tainted syzkaller #0 [ 646.098547][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.108608][T10219] Call Trace: [ 646.111879][T10219] [ 646.114800][T10219] __dump_stack+0x21/0x24 [ 646.119134][T10219] dump_stack_lvl+0xee/0x150 [ 646.123718][T10219] ? __cfi_dump_stack_lvl+0x8/0x8 [ 646.128744][T10219] dump_stack+0x15/0x24 [ 646.132979][T10219] should_fail_ex+0x3d4/0x520 [ 646.137665][T10219] should_fail+0xb/0x10 [ 646.141829][T10219] should_fail_usercopy+0x1a/0x20 [ 646.146863][T10219] _copy_from_user+0x1e/0xc0 [ 646.151454][T10219] ___sys_recvmsg+0x12b/0x510 [ 646.156133][T10219] ? __sys_recvmsg+0x270/0x270 [ 646.160977][T10219] ? security_file_permission+0x94/0xb0 [ 646.166520][T10219] ? __fget_files+0x2d5/0x330 [ 646.171191][T10219] ? __fdget+0x19c/0x220 [ 646.175425][T10219] __x64_sys_recvmsg+0x1ed/0x2c0 [ 646.180359][T10219] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 646.185817][T10219] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 646.191897][T10219] x64_sys_call+0x75/0x9a0 [ 646.196309][T10219] do_syscall_64+0x4c/0xa0 [ 646.200721][T10219] ? clear_bhb_loop+0x30/0x80 [ 646.205396][T10219] ? clear_bhb_loop+0x30/0x80 [ 646.210073][T10219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.215969][T10219] RIP: 0033:0x7ff0ef18f749 [ 646.220374][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.239980][T10219] RSP: 002b:00007ff0eff8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 646.248392][T10219] RAX: ffffffffffffffda RBX: 00007ff0ef3e5fa0 RCX: 00007ff0ef18f749 [ 646.256367][T10219] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 646.264332][T10219] RBP: 00007ff0eff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 646.272294][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.280261][T10219] R13: 00007ff0ef3e6038 R14: 00007ff0ef3e5fa0 R15: 00007ffd0ba21308 [ 646.288230][T10219] [ 646.472124][ T541] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 646.699413][ T541] usb 7-1: unable to get BOS descriptor or descriptor too short [ 646.786293][ T541] usb 7-1: not running at top speed; connect to a high speed hub [ 646.806076][ T541] usb 7-1: config 3 has an invalid interface number: 178 but max is 0 [ 646.939190][ T541] usb 7-1: config 3 has no interface number 0 [ 646.948590][T10240] loop3: detected capacity change from 0 to 512 [ 646.960500][ T541] usb 7-1: config 3 interface 178 has no altsetting 0 [ 646.967829][T10240] EXT4-fs: Ignoring removed bh option [ 646.969505][ T541] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=42.64 [ 646.982524][ T541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.990844][ T541] usb 7-1: Product: syz [ 646.995701][ T541] usb 7-1: Manufacturer: syz [ 646.996537][T10240] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 647.000675][ T541] usb 7-1: SerialNumber: syz [ 647.032766][T10232] syz.4.2375 (10232) used greatest stack depth: 20248 bytes left [ 647.049681][T10240] EXT4-fs (loop3): 1 truncate cleaned up [ 647.060162][T10240] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 647.092044][ T286] EXT4-fs (loop3): unmounting filesystem. [ 647.248228][ T541] snd-usb-audio: probe of 7-1:3.178 failed with error -71 [ 647.387747][ T541] usb 7-1: USB disconnect, device number 8 [ 647.848084][T10263] syz.5.2385[10263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.848155][T10263] syz.5.2385[10263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 647.868736][T10264] device wireguard4 entered promiscuous mode [ 648.307528][T10276] FAULT_INJECTION: forcing a failure. [ 648.307528][T10276] name failslab, interval 1, probability 0, space 0, times 0 [ 648.320220][T10276] CPU: 1 PID: 10276 Comm: syz.4.2388 Not tainted syzkaller #0 [ 648.327692][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.337726][T10276] Call Trace: [ 648.340982][T10276] [ 648.343894][T10276] __dump_stack+0x21/0x24 [ 648.348206][T10276] dump_stack_lvl+0xee/0x150 [ 648.352774][T10276] ? __cfi_dump_stack_lvl+0x8/0x8 [ 648.357778][T10276] ? __stack_depot_save+0x36/0x480 [ 648.362876][T10276] dump_stack+0x15/0x24 [ 648.367019][T10276] should_fail_ex+0x3d4/0x520 [ 648.371686][T10276] __should_failslab+0xac/0xf0 [ 648.376439][T10276] ? kvmalloc_node+0x294/0x480 [ 648.381184][T10276] should_failslab+0x9/0x20 [ 648.385681][T10276] __kmem_cache_alloc_node+0x3d/0x2c0 [ 648.391036][T10276] ? __kasan_check_write+0x14/0x20 [ 648.396124][T10276] ? kvmalloc_node+0x294/0x480 [ 648.400865][T10276] __kmalloc_node+0xa1/0x1e0 [ 648.405438][T10276] kvmalloc_node+0x294/0x480 [ 648.410004][T10276] ? __kasan_check_write+0x14/0x20 [ 648.415097][T10276] ? __cfi_kvmalloc_node+0x10/0x10 [ 648.420186][T10276] file_tty_write+0x2c5/0x890 [ 648.424849][T10276] ? __cfi_n_tty_write+0x10/0x10 [ 648.429860][T10276] tty_write+0x3c/0x50 [ 648.433907][T10276] vfs_write+0x5db/0xca0 [ 648.438131][T10276] ? slab_free_freelist_hook+0xc2/0x190 [ 648.443746][T10276] ? __cfi_vfs_write+0x10/0x10 [ 648.448493][T10276] ? __fget_files+0x2d5/0x330 [ 648.453149][T10276] ? __fdget_pos+0x1f2/0x380 [ 648.457724][T10276] ? ksys_write+0x71/0x240 [ 648.462117][T10276] ksys_write+0x140/0x240 [ 648.466424][T10276] ? __cfi_ksys_write+0x10/0x10 [ 648.471252][T10276] ? debug_smp_processor_id+0x17/0x20 [ 648.476601][T10276] __x64_sys_write+0x7b/0x90 [ 648.481170][T10276] x64_sys_call+0x27b/0x9a0 [ 648.485672][T10276] do_syscall_64+0x4c/0xa0 [ 648.490071][T10276] ? clear_bhb_loop+0x30/0x80 [ 648.494743][T10276] ? clear_bhb_loop+0x30/0x80 [ 648.499400][T10276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.505276][T10276] RIP: 0033:0x7ff0ef18f749 [ 648.509672][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.529342][T10276] RSP: 002b:00007ff0eff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 648.537848][T10276] RAX: ffffffffffffffda RBX: 00007ff0ef3e6180 RCX: 00007ff0ef18f749 [ 648.545799][T10276] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 000000000000000a [ 648.553750][T10276] RBP: 00007ff0eff4d090 R08: 0000000000000000 R09: 0000000000000000 [ 648.561703][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.569652][T10276] R13: 00007ff0ef3e6218 R14: 00007ff0ef3e6180 R15: 00007ffd0ba21308 [ 648.577610][T10276] [ 649.715633][T10286] loop4: detected capacity change from 0 to 40427 [ 649.738078][T10286] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 649.775573][T10286] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 649.813607][T10286] F2FS-fs (loop4): invalid crc value [ 649.893372][T10286] F2FS-fs (loop4): Found nat_bits in checkpoint [ 649.954775][T10286] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 649.963018][T10286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 650.880464][T10311] syz.5.2396[10311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.880948][T10311] syz.5.2396[10311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 651.708413][ T28] audit: type=1400 audit(1764192087.635:348): avc: denied { mounton } for pid=10285 comm="syz.4.2392" path="/485/bus/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 651.708550][T10314] overlayfs: failed to resolve './bus': -2 [ 652.308540][T10319] loop0: detected capacity change from 0 to 256 [ 652.373764][T10319] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1100abd0, checksum : 0x1119abd0) [ 652.444420][T10319] exFAT-fs (loop0): invalid boot region [ 652.455180][T10319] exFAT-fs (loop0): failed to recognize exfat type [ 653.740255][ T28] audit: type=1400 audit(1764192089.534:349): avc: denied { mount } for pid=10318 comm="syz.0.2399" name="/" dev="configfs" ino=12765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 654.001673][T10338] loop6: detected capacity change from 0 to 256 [ 654.016263][ T28] audit: type=1400 audit(1764192089.562:350): avc: denied { search } for pid=10318 comm="syz.0.2399" name="/" dev="configfs" ino=12765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 654.050968][T10338] FAT-fs (loop6): Directory bread(block 64) failed [ 654.074905][T10338] FAT-fs (loop6): Directory bread(block 65) failed [ 654.085922][T10338] FAT-fs (loop6): Directory bread(block 66) failed [ 654.096919][T10338] FAT-fs (loop6): Directory bread(block 67) failed [ 654.213128][T10338] FAT-fs (loop6): Directory bread(block 68) failed [ 654.225361][T10338] FAT-fs (loop6): Directory bread(block 69) failed [ 654.235024][T10344] loop3: detected capacity change from 0 to 512 [ 654.253647][T10338] FAT-fs (loop6): Directory bread(block 70) failed [ 654.268751][T10344] EXT4-fs (loop3): #blocks per group too big: 65535 [ 654.285892][T10338] FAT-fs (loop6): Directory bread(block 71) failed [ 654.307767][T10338] FAT-fs (loop6): Directory bread(block 72) failed [ 654.330620][T10338] FAT-fs (loop6): Directory bread(block 73) failed [ 654.458889][ T28] audit: type=1400 audit(1764192090.132:351): avc: denied { mount } for pid=10337 comm="syz.6.2404" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 655.080381][ T28] audit: type=1400 audit(1764192090.740:352): avc: denied { unmount } for pid=6819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 655.104554][T10350] loop0: detected capacity change from 0 to 512 [ 655.217904][T10359] overlayfs: failed to clone upperpath [ 655.238974][T10350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 655.308137][T10350] ext4 filesystem being mounted at /459/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.414369][ T283] EXT4-fs (loop0): unmounting filesystem. [ 655.680883][T10372] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 655.922418][T10373] device wireguard3 entered promiscuous mode [ 656.209716][T10385] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 656.449349][T10388] device wireguard1 entered promiscuous mode [ 657.729826][T10403] overlayfs: failed to resolve './bus': -2 [ 658.253973][T10405] device wireguard3 entered promiscuous mode [ 659.078711][T10422] device wireguard1 entered promiscuous mode [ 659.101600][T10418] loop3: detected capacity change from 0 to 1024 [ 659.193714][T10418] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 659.205566][T10418] EXT4-fs (loop3): orphan cleanup on readonly fs [ 659.212012][T10418] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.2423: Freeing blocks not in datazone - block = 0, count = 4096 [ 659.229083][T10418] EXT4-fs (loop3): 1 orphan inode deleted [ 659.235680][T10432] FAULT_INJECTION: forcing a failure. [ 659.235680][T10432] name failslab, interval 1, probability 0, space 0, times 0 [ 659.251666][T10418] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 659.264456][T10399] syz.5.2419[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.264540][T10399] syz.5.2419[10399] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 659.285117][T10432] CPU: 1 PID: 10432 Comm: syz.6.2424 Not tainted syzkaller #0 [ 659.303930][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 659.313992][T10432] Call Trace: [ 659.317271][T10432] [ 659.320199][T10432] __dump_stack+0x21/0x24 [ 659.324536][T10432] dump_stack_lvl+0xee/0x150 [ 659.329133][T10432] ? __cfi_dump_stack_lvl+0x8/0x8 [ 659.334156][T10432] ? __local_bh_enable_ip+0x58/0x80 [ 659.339359][T10432] ? release_sock+0x169/0x1c0 [ 659.344039][T10432] dump_stack+0x15/0x24 [ 659.348194][T10432] should_fail_ex+0x3d4/0x520 [ 659.352968][T10432] __should_failslab+0xac/0xf0 [ 659.357733][T10432] should_failslab+0x9/0x20 [ 659.362238][T10432] kmem_cache_alloc_node+0x42/0x340 [ 659.367438][T10432] ? __alloc_skb+0xea/0x4b0 [ 659.371991][T10432] __alloc_skb+0xea/0x4b0 [ 659.376320][T10432] ? netlink_autobind+0x168/0x1a0 [ 659.381351][T10432] netlink_sendmsg+0x626/0xbc0 [ 659.386113][T10432] ? __cfi_netlink_sendmsg+0x10/0x10 [ 659.391404][T10432] ? security_socket_sendmsg+0x93/0xb0 [ 659.396866][T10432] sock_write_iter+0x2ca/0x3b0 [ 659.401642][T10432] ? __cfi_sock_write_iter+0x10/0x10 [ 659.406951][T10432] ? fsnotify_perm+0x67/0x5b0 [ 659.411634][T10432] ? security_file_permission+0x8a/0xb0 [ 659.417185][T10432] vfs_write+0x5db/0xca0 [ 659.421436][T10432] ? slab_free_freelist_hook+0xc2/0x190 [ 659.426990][T10432] ? __cfi_vfs_write+0x10/0x10 [ 659.431772][T10432] ? __fget_files+0x2d5/0x330 [ 659.436456][T10432] ? __fdget_pos+0x1f2/0x380 [ 659.441138][T10432] ? ksys_write+0x71/0x240 [ 659.445554][T10432] ksys_write+0x140/0x240 [ 659.449885][T10432] ? __cfi_ksys_write+0x10/0x10 [ 659.454739][T10432] ? debug_smp_processor_id+0x17/0x20 [ 659.460113][T10432] __x64_sys_write+0x7b/0x90 [ 659.464701][T10432] x64_sys_call+0x27b/0x9a0 [ 659.469203][T10432] do_syscall_64+0x4c/0xa0 [ 659.473614][T10432] ? clear_bhb_loop+0x30/0x80 [ 659.478280][T10432] ? clear_bhb_loop+0x30/0x80 [ 659.482965][T10432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.488847][T10432] RIP: 0033:0x7f013b38f749 [ 659.493242][T10432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.512835][T10432] RSP: 002b:00007f013c1d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 659.521242][T10432] RAX: ffffffffffffffda RBX: 00007f013b5e6090 RCX: 00007f013b38f749 [ 659.529234][T10432] RDX: 0000000000000024 RSI: 0000200000000580 RDI: 0000000000000006 [ 659.537451][T10432] RBP: 00007f013c1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 659.545412][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.553361][T10432] R13: 00007f013b5e6128 R14: 00007f013b5e6090 R15: 00007ffc226688b8 [ 659.561315][T10432] [ 659.657771][ T286] EXT4-fs (loop3): unmounting filesystem. [ 659.822110][T10438] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 661.910403][T10448] overlayfs: failed to resolve './bus': -2 [ 662.408221][T10455] FAULT_INJECTION: forcing a failure. [ 662.408221][T10455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.421378][T10455] CPU: 1 PID: 10455 Comm: syz.6.2434 Not tainted syzkaller #0 [ 662.428850][T10455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 662.438910][T10455] Call Trace: [ 662.442189][T10455] [ 662.445117][T10455] __dump_stack+0x21/0x24 [ 662.449448][T10455] dump_stack_lvl+0xee/0x150 [ 662.454053][T10455] ? __cfi_dump_stack_lvl+0x8/0x8 [ 662.459094][T10455] dump_stack+0x15/0x24 [ 662.463233][T10455] should_fail_ex+0x3d4/0x520 [ 662.467895][T10455] should_fail+0xb/0x10 [ 662.472033][T10455] should_fail_usercopy+0x1a/0x20 [ 662.477039][T10455] _copy_from_user+0x1e/0xc0 [ 662.481609][T10455] __sys_bpf+0x277/0x780 [ 662.485844][T10455] ? bpf_link_show_fdinfo+0x320/0x320 [ 662.491192][T10455] ? __cfi_ksys_write+0x10/0x10 [ 662.496028][T10455] ? debug_smp_processor_id+0x17/0x20 [ 662.496112][T10458] overlayfs: failed to clone upperpath [ 662.501402][T10455] __x64_sys_bpf+0x7c/0x90 [ 662.501429][T10455] x64_sys_call+0x488/0x9a0 [ 662.501449][T10455] do_syscall_64+0x4c/0xa0 [ 662.520196][T10455] ? clear_bhb_loop+0x30/0x80 [ 662.524855][T10455] ? clear_bhb_loop+0x30/0x80 [ 662.529599][T10455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.535487][T10455] RIP: 0033:0x7f013b38f749 [ 662.539912][T10455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.559503][T10455] RSP: 002b:00007f013c1f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.567934][T10455] RAX: ffffffffffffffda RBX: 00007f013b5e5fa0 RCX: 00007f013b38f749 [ 662.575891][T10455] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000008 [ 662.583925][T10455] RBP: 00007f013c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 662.591888][T10455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.599842][T10455] R13: 00007f013b5e6038 R14: 00007f013b5e5fa0 R15: 00007ffc226688b8 [ 662.607805][T10455] [ 662.644629][T10442] device wireguard3 entered promiscuous mode [ 663.390963][T10473] device wireguard0 entered promiscuous mode [ 664.359713][T10484] device wireguard1 entered promiscuous mode [ 664.424704][T10489] overlayfs: failed to resolve './bus': -2 [ 664.629880][T10506] overlayfs: conflicting lowerdir path [ 664.720462][T10513] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 664.836795][T10517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=10517 comm=syz.0.2445 [ 664.891924][T10519] device wireguard3 entered promiscuous mode [ 665.596987][T10528] overlayfs: conflicting lowerdir path [ 665.646076][T10533] syz.4.2447[10533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.646123][T10533] syz.4.2447[10533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 665.833557][ T28] audit: type=1400 audit(1764192100.843:353): avc: denied { ioctl } for pid=10538 comm="syz.0.2451" path="/dev/input/event2" dev="devtmpfs" ino=277 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 666.657320][T10554] loop0: detected capacity change from 0 to 512 [ 666.722606][T10554] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 666.739107][T10554] ext4 filesystem being mounted at /471/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.563255][T10566] overlayfs: failed to resolve './bus': -2 [ 667.797686][T10568] device wireguard3 entered promiscuous mode [ 668.219825][ T283] EXT4-fs (loop0): unmounting filesystem. [ 668.245481][T10586] loop6: detected capacity change from 0 to 512 [ 668.252796][T10586] EXT4-fs: Ignoring removed bh option [ 668.258678][T10586] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 668.268937][T10586] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 668.444265][T10586] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 668.457836][T10586] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 668.476812][T10586] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 668.493399][T10586] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 668.500749][T10586] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 668.510361][T10586] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 668.518476][T10586] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 668.527647][T10586] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2466: bg 0: block 353: padding at end of block bitmap is not set [ 668.562763][T10599] loop0: detected capacity change from 0 to 128 [ 668.595526][T10113] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 668.607895][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 668.638220][T10601] loop0: detected capacity change from 0 to 512 [ 668.663988][T10601] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 668.689424][T10601] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 668.704197][T10601] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2469: bg 0: block 248: padding at end of block bitmap is not set [ 668.721374][T10601] Quota error (device loop0): write_blk: dquota write failed [ 668.729020][T10601] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 668.739273][T10601] EXT4-fs error (device loop0): ext4_acquire_dquot:6803: comm syz.0.2469: Failed to acquire dquot type 1 [ 668.751336][T10601] EXT4-fs (loop0): 1 truncate cleaned up [ 668.757268][T10601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 670.222018][T10621] device wireguard3 entered promiscuous mode [ 670.307071][ T283] EXT4-fs (loop0): unmounting filesystem. [ 670.453756][T10634] FAULT_INJECTION: forcing a failure. [ 670.453756][T10634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.471037][T10630] loop0: detected capacity change from 0 to 512 [ 670.477435][T10634] CPU: 0 PID: 10634 Comm: syz.6.2480 Not tainted syzkaller #0 [ 670.484893][T10634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.494943][T10634] Call Trace: [ 670.498218][T10634] [ 670.501141][T10634] __dump_stack+0x21/0x24 [ 670.505472][T10634] dump_stack_lvl+0xee/0x150 [ 670.510058][T10634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 670.515084][T10634] dump_stack+0x15/0x24 [ 670.519237][T10634] should_fail_ex+0x3d4/0x520 [ 670.523926][T10634] should_fail+0xb/0x10 [ 670.528079][T10634] should_fail_usercopy+0x1a/0x20 [ 670.533099][T10634] _copy_from_user+0x1e/0xc0 [ 670.537688][T10634] ___sys_sendmsg+0x155/0x290 [ 670.542359][T10634] ? __sys_sendmsg+0x270/0x270 [ 670.547125][T10634] ? kstrtouint+0x74/0xe0 [ 670.551458][T10634] ? __fdget+0x19c/0x220 [ 670.555691][T10634] __sys_sendmmsg+0x274/0x460 [ 670.560360][T10634] ? slab_free_freelist_hook+0xc2/0x190 [ 670.565908][T10634] ? __cfi___sys_sendmmsg+0x10/0x10 [ 670.571107][T10634] ? __cfi_ksys_write+0x10/0x10 [ 670.575951][T10634] __x64_sys_sendmmsg+0xa0/0xb0 [ 670.580798][T10634] x64_sys_call+0x3f5/0x9a0 [ 670.585296][T10634] do_syscall_64+0x4c/0xa0 [ 670.589702][T10634] ? clear_bhb_loop+0x30/0x80 [ 670.594379][T10634] ? clear_bhb_loop+0x30/0x80 [ 670.599087][T10634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.604974][T10634] RIP: 0033:0x7f013b38f749 [ 670.609470][T10634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.629074][T10634] RSP: 002b:00007f013c1f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.637486][T10634] RAX: ffffffffffffffda RBX: 00007f013b5e5fa0 RCX: 00007f013b38f749 [ 670.645451][T10634] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 670.653420][T10634] RBP: 00007f013c1f2090 R08: 0000000000000000 R09: 0000000000000000 [ 670.661403][T10634] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 670.669376][T10634] R13: 00007f013b5e6038 R14: 00007f013b5e5fa0 R15: 00007ffc226688b8 [ 670.677359][T10634] [ 670.720301][T10630] EXT4-fs: Mount option(s) incompatible with ext3 [ 670.844621][T10643] loop0: detected capacity change from 0 to 128 [ 670.894118][T10643] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 670.904957][T10643] ext4 filesystem being mounted at /478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 670.929709][ T283] EXT4-fs (loop0): unmounting filesystem. [ 670.947299][T10652] loop0: detected capacity change from 0 to 512 [ 670.965997][T10652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 670.976827][T10652] ext4 filesystem being mounted at /479/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.028562][ T6] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 671.232705][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 671.252551][ T6] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 671.252944][ T541] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 671.276480][ T6] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 671.303560][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 671.326069][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.348589][T10639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 671.359681][ T6] usb 4-1: invalid MIDI out EP 0 [ 671.374774][ T6] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 671.411389][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 671.479147][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 671.502911][ T541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 671.535397][ T541] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 671.556536][ T541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.575845][ T541] usb 5-1: Product: syz [ 671.580047][ T541] usb 5-1: Manufacturer: syz [ 671.582317][T10639] loop3: detected capacity change from 0 to 128 [ 671.597224][ T541] usb 5-1: SerialNumber: syz [ 671.613441][ T541] usb 5-1: config 0 descriptor?? [ 671.623190][T10639] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 671.623444][ T541] hub 5-1:0.0: bad descriptor, ignoring hub [ 671.637598][ T541] hub: probe of 5-1:0.0 failed with error -5 [ 671.648090][ T541] snd-usb-audio: probe of 5-1:0.0 failed with error -12 [ 671.653386][T10639] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 671.667158][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 671.717888][ T6] usb 4-1: USB disconnect, device number 32 [ 671.916612][T10648] loop4: detected capacity change from 0 to 512 [ 671.931258][ T283] EXT4-fs (loop0): unmounting filesystem. [ 671.948246][T10648] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 671.957142][T10648] EXT4-fs (loop4): invalid journal inode [ 672.052142][T10665] device wireguard0 entered promiscuous mode [ 672.130662][T10648] EXT4-fs (loop4): can't get journal size [ 672.155948][T10648] EXT4-fs (loop4): 1 truncate cleaned up [ 672.178394][T10648] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 672.461052][ T541] usb 5-1: USB disconnect, device number 28 [ 672.472907][ T286] EXT4-fs (loop3): unmounting filesystem. [ 672.954691][T10680] 9pnet_fd: Insufficient options for proto=fd [ 672.957044][ T28] audit: type=1400 audit(1764192107.503:354): avc: denied { watch watch_reads } for pid=10679 comm="syz.5.2493" path="/276/file0" dev="tmpfs" ino=1559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 672.984600][T10676] device wireguard3 entered promiscuous mode [ 673.096168][ T285] EXT4-fs (loop4): unmounting filesystem. [ 673.184550][T10693] loop3: detected capacity change from 0 to 128 [ 673.231500][T10693] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 673.240342][T10693] ext4 filesystem being mounted at /495/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 674.002194][ T286] EXT4-fs (loop3): unmounting filesystem. [ 675.346383][T10709] overlayfs: conflicting lowerdir path [ 675.411306][T10712] overlayfs: conflicting lowerdir path [ 675.444991][T10710] device wireguard1 entered promiscuous mode [ 675.655461][T10721] loop4: detected capacity change from 0 to 128 [ 675.703288][ T28] audit: type=1400 audit(1764192110.084:355): avc: denied { write } for pid=10723 comm="syz.3.2507" name="ip6_tables_names" dev="proc" ino=4026532620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 675.729211][ T28] audit: type=1400 audit(1764192110.094:356): avc: denied { getopt } for pid=10723 comm="syz.3.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 675.743823][T10721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 675.797606][T10721] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 675.846028][T10721] FAULT_INJECTION: forcing a failure. [ 675.846028][T10721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.933935][T10736] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 676.029049][T10735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56316 sclass=netlink_route_socket pid=10735 comm=syz.6.2506 [ 676.042817][T10721] CPU: 0 PID: 10721 Comm: syz.4.2505 Not tainted syzkaller #0 [ 676.050287][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.060336][T10721] Call Trace: [ 676.063611][T10721] [ 676.066545][T10721] __dump_stack+0x21/0x24 [ 676.070874][T10721] dump_stack_lvl+0xee/0x150 [ 676.075462][T10721] ? __cfi_dump_stack_lvl+0x8/0x8 [ 676.080485][T10721] dump_stack+0x15/0x24 [ 676.084635][T10721] should_fail_ex+0x3d4/0x520 [ 676.089316][T10721] should_fail+0xb/0x10 [ 676.093481][T10721] should_fail_usercopy+0x1a/0x20 [ 676.098507][T10721] _copy_from_user+0x1e/0xc0 [ 676.103103][T10721] fscrypt_ioctl_set_policy+0x1de/0x480 [ 676.108660][T10721] ? __cfi_fscrypt_ioctl_set_policy+0x10/0x10 [ 676.114739][T10721] ? kernel_text_address+0xa0/0xd0 [ 676.119851][T10721] ? unwind_get_return_address+0x4d/0x90 [ 676.125490][T10721] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 676.131648][T10721] ext4_ioctl+0x18d2/0x3b20 [ 676.136153][T10721] ? memcpy+0x56/0x70 [ 676.140127][T10721] ? __cfi_ext4_ioctl+0x10/0x10 [ 676.144980][T10721] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 676.150967][T10721] ? do_vfs_ioctl+0xc36/0x1c80 [ 676.155743][T10721] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 676.161384][T10721] ? kstrtouint+0x74/0xe0 [ 676.165728][T10721] ? ioctl_has_perm+0x391/0x4c0 [ 676.170581][T10721] ? has_cap_mac_admin+0x330/0x330 [ 676.175706][T10721] ? security_file_permission+0x94/0xb0 [ 676.181253][T10721] ? vfs_write+0x9d6/0xca0 [ 676.185670][T10721] ? slab_free_freelist_hook+0xc2/0x190 [ 676.191219][T10721] ? selinux_file_ioctl+0x377/0x480 [ 676.196416][T10721] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 676.201957][T10721] ? mutex_unlock+0x89/0x220 [ 676.206560][T10721] ? __cfi_mutex_unlock+0x10/0x10 [ 676.211584][T10721] ? __fget_files+0x2d5/0x330 [ 676.216262][T10721] ? security_file_ioctl+0x95/0xc0 [ 676.221381][T10721] ? __cfi_ext4_ioctl+0x10/0x10 [ 676.226229][T10721] __se_sys_ioctl+0x12f/0x1b0 [ 676.230943][T10721] __x64_sys_ioctl+0x7b/0x90 [ 676.235523][T10721] x64_sys_call+0x58b/0x9a0 [ 676.240017][T10721] do_syscall_64+0x4c/0xa0 [ 676.244425][T10721] ? clear_bhb_loop+0x30/0x80 [ 676.249101][T10721] ? clear_bhb_loop+0x30/0x80 [ 676.253773][T10721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.260094][T10721] RIP: 0033:0x7ff0ef18f749 [ 676.264504][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.284104][T10721] RSP: 002b:00007ff0eff8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.292520][T10721] RAX: ffffffffffffffda RBX: 00007ff0ef3e5fa0 RCX: 00007ff0ef18f749 [ 676.300503][T10721] RDX: 00002000000000c0 RSI: 00000000800c6613 RDI: 0000000000000007 [ 676.308465][T10721] RBP: 00007ff0eff8f090 R08: 0000000000000000 R09: 0000000000000000 [ 676.316429][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.324389][T10721] R13: 00007ff0ef3e6038 R14: 00007ff0ef3e5fa0 R15: 00007ffd0ba21308 [ 676.332446][T10721] [ 676.337480][T10738] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 676.345945][T10738] FAULT_INJECTION: forcing a failure. [ 676.345945][T10738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.359250][T10738] CPU: 0 PID: 10738 Comm: syz.3.2509 Not tainted syzkaller #0 [ 676.366705][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 676.376749][T10738] Call Trace: [ 676.380020][T10738] [ 676.383028][T10738] __dump_stack+0x21/0x24 [ 676.387454][T10738] dump_stack_lvl+0xee/0x150 [ 676.392038][T10738] ? __cfi_dump_stack_lvl+0x8/0x8 [ 676.397051][T10738] ? stack_trace_save+0x98/0xe0 [ 676.401901][T10738] ? __stack_depot_save+0x36/0x480 [ 676.407009][T10738] dump_stack+0x15/0x24 [ 676.411160][T10738] should_fail_ex+0x3d4/0x520 [ 676.415841][T10738] should_fail_alloc_page+0x61/0x90 [ 676.421040][T10738] prepare_alloc_pages+0x148/0x5f0 [ 676.426146][T10738] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 676.431346][T10738] ? kstrtouint+0x74/0xe0 [ 676.435675][T10738] __alloc_pages+0x124/0x450 [ 676.440262][T10738] ? __cfi___alloc_pages+0x10/0x10 [ 676.445456][T10738] ? __kasan_check_write+0x14/0x20 [ 676.450556][T10738] ? proc_fail_nth_write+0x17a/0x1f0 [ 676.455840][T10738] __folio_alloc+0x12/0x40 [ 676.460253][T10738] handle_mm_fault+0x18ef/0x2640 [ 676.465190][T10738] ? __cfi_handle_mm_fault+0x10/0x10 [ 676.470473][T10738] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 676.475670][T10738] ? __kasan_check_write+0x14/0x20 [ 676.480773][T10738] ? fput+0x154/0x1a0 [ 676.484747][T10738] ? ksys_write+0x1eb/0x240 [ 676.489238][T10738] do_user_addr_fault+0x905/0x1050 [ 676.494347][T10738] exc_page_fault+0x51/0xb0 [ 676.498855][T10738] asm_exc_page_fault+0x27/0x30 [ 676.503700][T10738] RIP: 0033:0x7f2262e569ca [ 676.508103][T10738] Code: b2 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 57 41 bf 00 00 c0 fe 41 56 41 55 41 54 45 31 e4 55 53 48 81 ec 08 1b 00 00 <48> 89 7c 24 78 48 8d 9c 24 f0 06 00 00 48 89 74 24 70 48 89 54 24 [ 676.527710][T10738] RSP: 002b:00007f2263e254f0 EFLAGS: 00010206 [ 676.533775][T10738] RAX: 00007f2262e569b0 RBX: 00007f22631e6180 RCX: 00002000000000c0 [ 676.541740][T10738] RDX: 0000200000fe7000 RSI: 0000000000000009 RDI: 0000000000000004 [ 676.549704][T10738] RBP: 00007f2263e27090 R08: 0000000000000001 R09: 0000000000000040 [ 676.557673][T10738] R10: 0000000000000004 R11: 0000200000fe7000 R12: 0000000000000000 [ 676.565636][T10738] R13: 00007f22631e6218 R14: 00007f22631e6180 R15: 00000000fec00000 [ 676.573612][T10738] [ 676.576956][T10738] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 676.642952][ T285] EXT4-fs (loop4): unmounting filesystem. [ 676.918968][ T541] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 677.123171][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 677.164354][ T541] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 677.213316][ T541] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 677.258170][ T541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.298507][ T541] usb 1-1: Product: syz [ 677.318815][ T541] usb 1-1: Manufacturer: syz [ 677.341444][ T541] usb 1-1: SerialNumber: syz [ 677.371635][ T541] usb 1-1: config 0 descriptor?? [ 677.400503][ T541] hub 1-1:0.0: bad descriptor, ignoring hub [ 677.429750][ T541] hub: probe of 1-1:0.0 failed with error -5 [ 677.484239][ T541] snd-usb-audio: probe of 1-1:0.0 failed with error -12 [ 677.523470][T10113] udevd[10113]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 677.616470][T10741] loop0: detected capacity change from 0 to 512 [ 677.663645][T10741] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 677.817628][T10741] EXT4-fs (loop0): invalid journal inode [ 677.823310][T10741] EXT4-fs (loop0): can't get journal size [ 679.132153][T10766] overlayfs: failed to clone upperpath [ 679.936361][T10741] EXT4-fs: failed to create workqueue [ 680.021990][T10741] EXT4-fs (loop0): mount failed [ 680.715237][ T291] usb 1-1: USB disconnect, device number 47 [ 681.291719][T10782] overlayfs: failed to resolve './file1': -2 [ 681.679671][T10780] overlayfs: conflicting lowerdir path [ 681.900855][ T28] audit: type=1400 audit(1764192115.874:357): avc: denied { bind } for pid=10785 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.258938][T10803] loop0: detected capacity change from 0 to 512 [ 682.287387][T10800] device wireguard4 entered promiscuous mode [ 682.293735][ T28] audit: type=1400 audit(1764192115.902:358): avc: denied { setopt } for pid=10785 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 682.349143][T10803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 682.367975][T10803] ext4 filesystem being mounted at /486/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 684.274546][ T541] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 684.500350][ T541] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 684.519326][ T541] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 684.545203][ T541] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 684.557397][ T283] EXT4-fs (loop0): unmounting filesystem. [ 684.564576][ T541] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.572578][ T541] usb 7-1: Product: syz [ 684.594824][ T541] usb 7-1: Manufacturer: syz [ 684.599443][ T541] usb 7-1: SerialNumber: syz [ 684.611769][T10831] overlayfs: conflicting lowerdir path [ 684.616620][ T541] usb 7-1: config 0 descriptor?? [ 684.674444][ T541] hub 7-1:0.0: bad descriptor, ignoring hub [ 684.684407][ T541] hub: probe of 7-1:0.0 failed with error -5 [ 684.704841][ T541] snd-usb-audio: probe of 7-1:0.0 failed with error -12 [ 684.722427][ T8250] udevd[8250]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 684.851516][T10837] device wireguard1 entered promiscuous mode [ 684.865968][T10839] overlayfs: failed to resolve './bus': -2 [ 684.895200][T10823] loop6: detected capacity change from 0 to 512 [ 684.905221][T10823] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 684.924407][T10823] EXT4-fs (loop6): invalid journal inode [ 684.931083][T10823] EXT4-fs (loop6): can't get journal size [ 684.950271][T10823] EXT4-fs (loop6): 1 truncate cleaned up [ 684.959275][T10823] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 685.024648][ T28] audit: type=1326 audit(1764192118.802:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.048246][ T28] audit: type=1326 audit(1764192118.802:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.071812][ T28] audit: type=1326 audit(1764192118.802:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.5.2535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.095573][ T28] audit: type=1326 audit(1764192118.802:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.097378][ T541] usb 7-1: USB disconnect, device number 9 [ 685.119390][ T28] audit: type=1326 audit(1764192118.802:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.148569][ T28] audit: type=1326 audit(1764192118.802:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9a5e78f749 code=0x7ffc0000 [ 685.172143][ T28] audit: type=1326 audit(1764192118.802:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9a5e78f783 code=0x7ffc0000 [ 685.221479][ T28] audit: type=1326 audit(1764192118.980:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a5e78e1ff code=0x7ffc0000 [ 686.619261][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 687.011495][T10858] loop0: detected capacity change from 0 to 512 [ 687.129352][T10858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 687.141431][T10858] ext4 filesystem being mounted at /489/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.258104][T10875] device wireguard4 entered promiscuous mode [ 687.819904][T10884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 687.859793][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 687.859806][ T28] audit: type=1400 audit(1764192121.459:410): avc: denied { relabelfrom } for pid=10883 comm="syz.3.2546" name="NETLINK" dev="sockfs" ino=50378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 687.915128][ T28] audit: type=1400 audit(1764192121.487:411): avc: denied { relabelto } for pid=10883 comm="syz.3.2546" name="NETLINK" dev="sockfs" ino=50378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_tcpdiag_socket permissive=1 [ 687.940751][ T28] audit: type=1400 audit(1764192121.496:412): avc: denied { ioctl } for pid=10883 comm="syz.3.2546" path="socket:[50378]" dev="sockfs" ino=50378 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=sock_file permissive=1 [ 687.974684][ T283] EXT4-fs (loop0): unmounting filesystem. [ 687.987982][T10887] loop6: detected capacity change from 0 to 128 [ 688.022168][T10887] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 688.080005][T10887] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 688.207495][T10897] overlayfs: conflicting lowerdir path [ 688.984653][T10906] syz.4.2551[10906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 688.985509][T10906] syz.4.2551[10906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 690.193273][ T4158] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 690.465014][T10912] overlayfs: failed to clone upperpath [ 690.647222][ T4158] usb 7-1: not running at top speed; connect to a high speed hub [ 690.664477][ T4158] usb 7-1: config 1 interface 0 altsetting 117 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 690.702877][ T4158] usb 7-1: config 1 interface 0 altsetting 117 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 690.731896][ T4158] usb 7-1: config 1 interface 0 has no altsetting 0 [ 690.953091][ T4158] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.237375][ T4158] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.246424][ T4158] usb 7-1: Product: э [ 691.251405][ T4158] usb 7-1: Manufacturer: Ȑ [ 691.256887][ T4158] usb 7-1: SerialNumber: 쯥檞淎傰柲Ⱪᬿ䐸ഫ瓢ࡱ [ 692.098107][ T4158] usb 7-1: can't set config #1, error -71 [ 692.180306][ T4158] usb 7-1: USB disconnect, device number 10 [ 692.217801][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 692.241965][ T28] audit: type=1400 audit(1764192125.556:413): avc: denied { create } for pid=10926 comm="syz.5.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 692.668718][T10947] overlayfs: conflicting lowerdir path [ 692.789683][T10942] device wireguard3 entered promiscuous mode [ 695.346228][T10962] overlayfs: conflicting lowerdir path [ 697.979751][T10982] overlayfs: failed to resolve './bus': -2 [ 698.413744][T10983] overlayfs: failed to resolve './file1': -2 [ 700.113931][T11010] overlayfs: failed to resolve './bus': -2 [ 700.557956][T11016] overlayfs: failed to resolve './bus': -2 [ 701.357583][T11017] device wireguard0 entered promiscuous mode [ 701.674298][T11022] device wireguard1 entered promiscuous mode [ 702.023147][T11035] device wireguard4 entered promiscuous mode [ 702.053429][T11037] device wireguard3 entered promiscuous mode [ 702.157436][T11045] overlayfs: failed to clone upperpath [ 703.135241][T11063] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 703.620741][T11071] syz.6.2591[11071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.621015][T11071] syz.6.2591[11071] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.263013][T11075] overlayfs: failed to clone upperpath [ 705.101054][T11080] device wireguard3 entered promiscuous mode [ 705.144942][T11083] loop0: detected capacity change from 0 to 512 [ 705.281941][T11083] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 705.290981][T11083] ext4 filesystem being mounted at /499/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.543500][T11099] overlayfs: failed to resolve './bus': -2 [ 706.765687][T11114] syz.6.2602[11114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.766071][T11114] syz.6.2602[11114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 707.819532][ T283] EXT4-fs (loop0): unmounting filesystem. [ 708.585845][T11129] overlayfs: failed to clone upperpath [ 709.032539][T11143] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 709.180496][T11145] overlayfs: failed to clone upperpath [ 709.591782][T11148] overlayfs: conflicting lowerdir path [ 710.248332][T11163] overlayfs: failed to clone upperpath [ 710.349479][T11165] syz.3.2615[11165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.349863][T11165] syz.3.2615[11165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.333216][T11168] loop0: detected capacity change from 0 to 512 [ 711.364389][T11168] EXT4-fs: Ignoring removed bh option [ 711.385784][T11168] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 711.394834][T11168] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 711.454676][T11168] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 711.475210][T11168] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 711.503434][T11168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 711.590473][T11168] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 711.633931][T11179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 711.667389][ T283] EXT4-fs (loop0): unmounting filesystem. [ 711.674324][T11179] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 711.692771][T11179] overlayfs: missing 'lowerdir' [ 716.057476][T11193] overlayfs: failed to clone upperpath [ 717.295769][T11205] loop6: detected capacity change from 0 to 512 [ 717.314615][T11205] EXT4-fs: Ignoring removed bh option [ 717.374112][T11205] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 717.403024][T11205] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 717.411555][T11201] device wireguard4 entered promiscuous mode [ 717.717480][T11212] device wireguard1 entered promiscuous mode [ 717.794358][T11205] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 717.807211][T11205] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 717.821939][T11205] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 717.847534][T11205] EXT4-fs (loop6): re-mounted. Quota mode: none. [ 717.926022][ T6819] EXT4-fs (loop6): unmounting filesystem. [ 717.990691][T11220] overlayfs: conflicting lowerdir path [ 718.122356][T11227] overlayfs: failed to resolve './bus': -2 [ 718.190012][T11228] FAULT_INJECTION: forcing a failure. [ 718.190012][T11228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.203234][T11228] CPU: 0 PID: 11228 Comm: syz.0.2632 Not tainted syzkaller #0 [ 718.210702][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 718.220757][T11228] Call Trace: [ 718.224024][T11228] [ 718.226935][T11228] __dump_stack+0x21/0x24 [ 718.231252][T11228] dump_stack_lvl+0xee/0x150 [ 718.235829][T11228] ? __cfi_dump_stack_lvl+0x8/0x8 [ 718.240841][T11228] dump_stack+0x15/0x24 [ 718.244977][T11228] should_fail_ex+0x3d4/0x520 [ 718.249638][T11228] should_fail+0xb/0x10 [ 718.253779][T11228] should_fail_usercopy+0x1a/0x20 [ 718.258787][T11228] _copy_from_user+0x1e/0xc0 [ 718.263363][T11228] __sys_bpf+0x277/0x780 [ 718.267590][T11228] ? bpf_link_show_fdinfo+0x320/0x320 [ 718.272942][T11228] ? __cfi_ksys_write+0x10/0x10 [ 718.277770][T11228] ? do_user_addr_fault+0x9ac/0x1050 [ 718.283042][T11228] ? debug_smp_processor_id+0x17/0x20 [ 718.288404][T11228] __x64_sys_bpf+0x7c/0x90 [ 718.292823][T11228] x64_sys_call+0x488/0x9a0 [ 718.297386][T11228] do_syscall_64+0x4c/0xa0 [ 718.301802][T11228] ? clear_bhb_loop+0x30/0x80 [ 718.306474][T11228] ? clear_bhb_loop+0x30/0x80 [ 718.311148][T11228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 718.317040][T11228] RIP: 0033:0x7f57d898f749 [ 718.321443][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.341033][T11228] RSP: 002b:00007f57d98de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 718.349432][T11228] RAX: ffffffffffffffda RBX: 00007f57d8be5fa0 RCX: 00007f57d898f749 [ 718.357385][T11228] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 0000000000000000 [ 718.365332][T11228] RBP: 00007f57d98de090 R08: 0000000000000000 R09: 0000000000000000 [ 718.373284][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.381232][T11228] R13: 00007f57d8be6038 R14: 00007f57d8be5fa0 R15: 00007ffc1fca15e8 [ 718.389187][T11228] [ 719.236341][T11244] loop6: detected capacity change from 0 to 512 [ 719.318691][T11244] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 719.330436][T11244] ext4 filesystem being mounted at /231/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.558400][T11252] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 719.726243][T11254] overlayfs: failed to clone upperpath [ 827.282334][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 827.289407][ C1] (detected by 1, t=10002 jiffies, g=59657, q=45 ncpus=2) [ 827.296602][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295017439-4295007437), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 827.309967][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g59657 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 827.321150][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 827.331110][ C1] rcu: RCU grace-period kthread stack dump: [ 827.336983][ C1] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 827.347749][ C1] Call Trace: [ 827.351022][ C1] [ 827.353951][ C1] __schedule+0xb87/0x14e0 [ 827.358376][ C1] ? __sched_text_start+0x8/0x8 [ 827.363221][ C1] schedule+0xbd/0x170 [ 827.367281][ C1] schedule_timeout+0x12c/0x2e0 [ 827.372125][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 827.377492][ C1] ? __cfi_process_timeout+0x10/0x10 [ 827.382785][ C1] ? prepare_to_swait_event+0x308/0x320 [ 827.388343][ C1] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 827.393193][ C1] ? rcu_gp_init+0xf10/0xf10 [ 827.397782][ C1] rcu_gp_kthread+0x95/0x370 [ 827.402363][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 827.407553][ C1] ? __kasan_check_read+0x11/0x20 [ 827.412571][ C1] ? __kthread_parkme+0x142/0x180 [ 827.417594][ C1] kthread+0x281/0x320 [ 827.421664][ C1] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 827.426855][ C1] ? __cfi_kthread+0x10/0x10 [ 827.431436][ C1] ret_from_fork+0x1f/0x30 [ 827.435863][ C1] [ 827.438875][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 827.445185][ C1] CPU: 1 PID: 11259 Comm: syz.3.2640 Not tainted syzkaller #0 [ 827.452637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 827.462682][ C1] RIP: 0033:0x7f2262f865e7 [ 827.467093][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d b2 62 d9 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 23 f8 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 827.486696][ C1] RSP: 002b:00007f2263e68a48 EFLAGS: 00000206 [ 827.492806][ C1] RAX: 000000000000070d RBX: 00007f2263e68bb0 RCX: 00007f2262f865e7 [ 827.500775][ C1] RDX: 00007f2263e68a80 RSI: 00007f2263e68bb0 RDI: 0000000000000021 [ 827.508737][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 827.517055][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 827.525015][ C1] R13: 00007f22631e6038 R14: 00007f22631e5fa0 R15: 00007ffe52b63388 [ 827.532977][ C1] FS: 00007f2263e696c0 GS: 0000000000000000 [ 887.844866][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 156s! [ 887.853906][ C0] Showing busy workqueues and worker pools: [ 887.859803][ C0] workqueue events: flags=0x0 [ 887.864491][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 887.864546][ C0] in-flight: 4158:free_work [ 887.864591][ C0] pending: kfree_rcu_monitor, rht_deferred_worker [ 887.864634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 887.864669][ C0] pending: psi_avgs_work, vmstat_shepherd, kfree_rcu_monitor [ 887.864723][ C0] workqueue events_long: flags=0x0 [ 887.904371][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=55/256 refcnt=56 [ 887.904419][ C0] pending: br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup [ 887.905472][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 887.905509][ C0] pending: br_fdb_cleanup, br_fdb_cleanup [ 887.905554][ C0] workqueue events_unbound: flags=0x2 [ 888.013030][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 888.013083][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 888.013136][ C0] workqueue events_power_efficient: flags=0x80 [ 888.034039][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 888.034100][ C0] pending: neigh_periodic_work, neigh_managed_work, neigh_managed_work, neigh_periodic_work, gc_worker, check_lifetime [ 888.034233][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.034269][ C0] pending: wg_ratelimiter_gc_entries [ 888.034300][ C0] workqueue rcu_gp: flags=0x8 [ 888.072680][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.072732][ C0] pending: process_srcu [ 888.072764][ C0] workqueue mm_percpu_wq: flags=0x8 [ 888.090091][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.090142][ C0] pending: vmstat_update [ 888.090185][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.090220][ C0] pending: vmstat_update [ 888.090248][ C0] workqueue writeback: flags=0x4a [ 888.119778][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.119829][ C0] pending: wb_workfn, wb_workfn [ 888.119872][ C0] workqueue kblockd: flags=0x18 [ 888.137084][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=2/256 refcnt=3 [ 888.137127][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work [ 888.137262][ C0] workqueue dm_bufio_cache: flags=0x8 [ 888.157353][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.157400][ C0] pending: work_fn [ 888.157435][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 888.174735][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=3 [ 888.174795][ C0] pending: addrconf_verify_work [ 888.174823][ C0] inactive: addrconf_verify_work [ 888.174846][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=5 [ 888.174882][ C0] pending: addrconf_verify_work [ 888.174903][ C0] inactive: addrconf_verify_work, addrconf_verify_work, addrconf_verify_work [ 888.174959][ C0] workqueue wg-kex-wg0: flags=0x6 [ 888.219602][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 888.219645][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 888.219710][ C0] workqueue wg-kex-wg1: flags=0x6 [ 888.244263][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.244309][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 888.244364][ C0] workqueue wg-kex-wg0: flags=0x6 [ 888.265576][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 888.265615][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 888.265681][ C0] workqueue wg-kex-wg1: flags=0x6 [ 888.290118][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.290158][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 888.290214][ C0] workqueue wg-kex-wg0: flags=0x6 [ 888.311425][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 888.311465][ C0] pending: wg_packet_handshake_send_worker [ 888.311496][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 888.330090][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.330131][ C0] pending: wg_packet_encrypt_worker [ 888.330171][ C0] workqueue wg-kex-wg1: flags=0x6 [ 888.348343][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 888.348383][ C0] pending: wg_packet_handshake_send_worker [ 888.348414][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 888.366993][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 888.367048][ C0] pending: wg_packet_encrypt_worker [ 888.367085][ C0] workqueue wg-kex-wg0: flags=0x6 [ 888.385261][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.385301][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 888.385348][ C0] workqueue wg-kex-wg1: flags=0x6 [ 888.406656][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.406699][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 888.406747][ C0] workqueue wg-kex-wg2: flags=0x6 [ 888.428138][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 888.428176][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 888.428237][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=156s workers=4 idle: 24 541 2702