last executing test programs: 12m10.395459284s ago: executing program 32 (id=132): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 8m45.123596453s ago: executing program 0 (id=501): syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@data_err_ignore}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@nouser_xattr}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@usrjquota}, {@errors_remount}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'minixdf'}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") 8m43.499181929s ago: executing program 0 (id=506): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @empty}, 0x2}}, 0x2e) ioctl$PPPIOCSMRU(r5, 0x40047452, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r7, 0x0, 0x0) 8m41.842714209s ago: executing program 0 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000040000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 8m38.295488762s ago: executing program 0 (id=513): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 8m36.250225327s ago: executing program 0 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getrlimit(0xe, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000284eea9316ce37fd532c97ee1dd4b000000000004000000000400001000"], 0x24, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1) 8m28.608564931s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getrlimit(0xe, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000284eea9316ce37fd532c97ee1dd4b000000000004000000000400001000"], 0x24, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1) 8m13.293550719s ago: executing program 33 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getrlimit(0xe, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000284eea9316ce37fd532c97ee1dd4b000000000004000000000400001000"], 0x24, 0x3) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1) 5m58.931418358s ago: executing program 3 (id=821): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 5m57.729377307s ago: executing program 3 (id=827): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r8}) 5m56.486258369s ago: executing program 3 (id=835): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 5m54.622192942s ago: executing program 6 (id=841): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r8}) 5m53.249033582s ago: executing program 6 (id=844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x18, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 5m52.998530679s ago: executing program 6 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 5m51.834078375s ago: executing program 6 (id=852): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000180)=0x6, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="275deff40000000000000000000000edffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 5m51.673299646s ago: executing program 3 (id=854): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x4, &(0x7f0000000380)=ANY=[]) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="ffb8eb83998d901db1a31cefbcc884e8", @ANYBLOB='\x00'/20], 0x48) shutdown(0xffffffffffffffff, 0x1) close(0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000000)={0xffffffff, 0x4, 0x5, 0xaeff, 0x7, 0x7}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/71}, 0x20) 5m50.934433014s ago: executing program 6 (id=857): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 5m47.241498448s ago: executing program 3 (id=858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b9000000000000000007000000060004"], 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0x2, 0x36e3, 0x2}, 0x10) 5m45.755357526s ago: executing program 6 (id=862): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 5m45.228729791s ago: executing program 3 (id=865): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") 5m29.957141296s ago: executing program 34 (id=862): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 5m29.929257828s ago: executing program 35 (id=865): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") 3m49.966598051s ago: executing program 5 (id=1113): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) socket$xdp(0x2c, 0x3, 0x0) 3m47.194376244s ago: executing program 5 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 3m46.19420929s ago: executing program 5 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r8}) 3m45.165123098s ago: executing program 5 (id=1124): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000000)="448b7cff030000000000008a15df09", 0xf}, {&(0x7f0000000100)="36d1ce1e6d25a81a70ff16f304874ef539d80e29baefbb8c", 0x18}], 0x3) 3m45.071888534s ago: executing program 5 (id=1125): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") 3m44.085850719s ago: executing program 5 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getrlimit(0xe, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000284eea9316ce37fd532c97ee1dd4b000000000004000000000400001000"], 0x24, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1) 3m29.030886721s ago: executing program 36 (id=1131): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x800714, &(0x7f0000000240)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}]}, 0xff, 0x485, &(0x7f0000001040)="$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") symlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x5, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getrlimit(0xe, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000284eea9316ce37fd532c97ee1dd4b000000000004000000000400001000"], 0x24, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x1) 1m25.513333545s ago: executing program 2 (id=1373): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r4, &(0x7f0000000080)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00') 1m23.194290528s ago: executing program 2 (id=1375): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1m16.144417102s ago: executing program 2 (id=1390): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d}) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x2c0) ioctl$UI_DEV_CREATE(r2, 0x5501) close(0x3) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) connect$bt_rfcomm(r0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, 0x0, 0x0) 1m13.782183947s ago: executing program 2 (id=1395): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 1m10.248942191s ago: executing program 2 (id=1399): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) process_vm_readv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000180)=0x6, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="275deff40000000000000000000000edffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 1m6.18838081s ago: executing program 2 (id=1406): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 51.035186394s ago: executing program 37 (id=1406): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) 14.758904272s ago: executing program 8 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") 12.68746966s ago: executing program 8 (id=1918): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r8}) 11.05532726s ago: executing program 8 (id=1924): syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@data_err_ignore}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@nouser_xattr}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80000000}}, {@usrjquota}, {@errors_remount}], [{@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@fowner_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, 'minixdf'}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") 10.094567294s ago: executing program 7 (id=1926): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000380)='./bus\x00', 0x3612c2, 0x0) 9.934562935s ago: executing program 7 (id=1927): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f00000005c0)={0x2, 0x2}) 9.819352092s ago: executing program 9 (id=1928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) pipe2$9p(&(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @initdev}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r4, &(0x7f0000000080)=ANY=[], 0x13) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.690431381s ago: executing program 4 (id=1929): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) pipe2$9p(&(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x13) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.610425166s ago: executing program 1 (id=1930): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x55d0, 0x3000, 0x0, 0xfffffffa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) exit(0xffff) pselect6(0x40, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x2, 0x0, 0x7, 0x40, 0x4}, &(0x7f0000000280), 0x0) 9.609814687s ago: executing program 4 (id=1931): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 8.139106865s ago: executing program 1 (id=1932): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xee01) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac141414}, 0x5}, 0x1c, 0x0}}], 0x1, 0x80) 8.095598508s ago: executing program 1 (id=1933): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r5, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 7.963462266s ago: executing program 9 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sendmsg$nl_route_sched(r0, 0x0, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket(0xa, 0x3, 0x87) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r8}) 6.857138391s ago: executing program 4 (id=1935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}], 0x1) 6.811943244s ago: executing program 9 (id=1936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 5.926545963s ago: executing program 7 (id=1937): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f0000000380)='./bus\x00', 0x3612c2, 0x0) 5.864611917s ago: executing program 1 (id=1938): syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)=@tcp6}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 5.863697317s ago: executing program 7 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 5.571366867s ago: executing program 4 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.5236335s ago: executing program 8 (id=1941): syz_mount_image$exfat(&(0x7f0000001840), &(0x7f0000000240)='./file0\x00', 0xc10, &(0x7f0000001800)=ANY=[], 0xfd, 0x1502, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xff, 0x23d, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) 4.576561443s ago: executing program 9 (id=1942): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX=r7, @ANYBLOB="2c73846d80e9aab122"]) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 4.534510016s ago: executing program 7 (id=1943): io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x55d0, 0x3000, 0x0, 0xfffffffa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 4.355627748s ago: executing program 4 (id=1944): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x808, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wf', @ANYRESHEX, @ANYBLOB="2c73846d80e9aab122"]) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 449.734859ms ago: executing program 8 (id=1945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="f1", 0x1, 0x200400c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss={0x2, 0x80}, @sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x7, 0xceca}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 413.098852ms ago: executing program 7 (id=1946): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 106.889002ms ago: executing program 1 (id=1947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000140)={0x81, 0x0, 0x1}) 106.410602ms ago: executing program 9 (id=1948): socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x18, 0x2b, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x87}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 67.217935ms ago: executing program 8 (id=1949): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) 66.053335ms ago: executing program 9 (id=1950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x3, 0x1000, 0x2000, &(0x7f0000ff1000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000fd004d564b00000000ff"]) 52.414146ms ago: executing program 1 (id=1951): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 4 (id=1952): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) kernel console output (not intermixed with test programs): enabled [ 630.956692][ T5161] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 630.963900][ T5161] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 631.051297][ T5164] loop2: detected capacity change from 0 to 512 [ 631.160437][ T5161] EXT4-fs (loop4): 1 truncate cleaned up [ 631.166162][ T5161] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 631.538658][ T385] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.580320][ T5164] EXT4-fs (loop2): 1 orphan inode deleted [ 631.586152][ T5164] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 631.597524][ T5164] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.758439][ T385] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 631.767938][ T385] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.012838][ T385] usb 8-1: config 0 descriptor?? [ 632.040416][ T5161] input: syz0 as /devices/virtual/input/input40 [ 632.049085][ T385] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 632.083548][ T5171] device syzkaller0 entered promiscuous mode [ 632.089874][ T5161] input: syz1 as /devices/virtual/input/input41 [ 632.507558][ T5184] loop4: detected capacity change from 0 to 512 [ 632.551084][ T5186] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 632.559878][ T5186] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 632.617563][ T3092] tipc: Left network mode [ 632.737125][ T5184] EXT4-fs (loop4): 1 orphan inode deleted [ 632.743011][ T5184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 632.754304][ T5184] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.970516][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.977864][ T5182] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.985570][ T5182] device bridge_slave_0 entered promiscuous mode [ 633.992831][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.000076][ T5182] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.007648][ T5182] device bridge_slave_1 entered promiscuous mode [ 634.228625][ T5182] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.235725][ T5182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.243141][ T5182] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.250191][ T5182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.276414][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.285834][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.307094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 634.315547][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.330807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 634.340208][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.348624][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.355697][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.408710][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.420521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.432140][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.439216][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.530002][ T5216] loop4: detected capacity change from 0 to 512 [ 634.762831][ T5216] EXT4-fs (loop4): 1 orphan inode deleted [ 634.768745][ T5216] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 634.780192][ T5216] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.500990][ T385] usb 8-1: USB disconnect, device number 3 [ 635.762491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.798709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.845274][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.863373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.926537][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.935218][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.935693][ T5231] loop7: detected capacity change from 0 to 512 [ 635.952236][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.962084][ T5231] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 635.969152][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.004221][ T5182] device veth0_vlan entered promiscuous mode [ 636.030737][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 636.049607][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.130949][ T5182] device veth1_macvtap entered promiscuous mode [ 636.165187][ T5231] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1163: invalid indirect mapped block 4294967295 (level 1) [ 636.196400][ T3092] device bridge_slave_1 left promiscuous mode [ 636.245542][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.253179][ T3092] device bridge_slave_0 left promiscuous mode [ 636.259395][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.267590][ T3092] device veth1_macvtap left promiscuous mode [ 636.273690][ T3092] device veth0_vlan left promiscuous mode [ 636.280628][ T5231] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1163: invalid indirect mapped block 4294967295 (level 1) [ 636.295013][ T5231] EXT4-fs (loop7): 2 truncates cleaned up [ 636.300859][ T5231] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 636.441950][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.458229][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.467588][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 636.515142][ T5239] loop8: detected capacity change from 0 to 512 [ 636.645206][ T5239] EXT4-fs (loop8): 1 orphan inode deleted [ 636.651082][ T5239] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 636.662580][ T5239] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.631894][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.647890][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.657232][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.665827][ T2911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.959225][ T5249] loop4: detected capacity change from 0 to 512 [ 640.340836][ T5251] loop8: detected capacity change from 0 to 512 [ 640.579847][ T5251] EXT4-fs (loop8): orphan cleanup on readonly fs [ 640.589196][ T5249] EXT4-fs (loop4): orphan cleanup on readonly fs [ 640.598938][ T5249] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 640.609287][ T5249] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 640.618756][ T5249] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1167: Failed to acquire dquot type 1 [ 640.632531][ T5249] EXT4-fs (loop4): 1 truncate cleaned up [ 640.638783][ T5249] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 640.732053][ T5251] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 640.742437][ T5251] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 640.751943][ T5251] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1168: Failed to acquire dquot type 1 [ 640.767722][ T5251] EXT4-fs (loop8): 1 truncate cleaned up [ 640.775162][ T5251] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 641.171558][ T5259] loop4: detected capacity change from 0 to 512 [ 641.199943][ T5255] device syzkaller0 entered promiscuous mode [ 641.237676][ T5259] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1170: casefold flag without casefold feature [ 641.250766][ T5259] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1170: couldn't read orphan inode 15 (err -117) [ 641.262896][ T5259] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 641.998508][ T5269] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 642.007251][ T5269] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 642.477279][ T5272] loop8: detected capacity change from 0 to 512 [ 643.800741][ T5276] loop9: detected capacity change from 0 to 512 [ 644.127899][ T5276] EXT4-fs (loop9): 1 orphan inode deleted [ 644.133783][ T5276] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 644.145115][ T5276] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.322916][ T5272] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 644.390432][ T5272] EXT4-fs (loop8): Test dummy encryption mode enabled [ 644.757031][ T5272] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 644.764447][ T5272] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 644.779098][ T5272] EXT4-fs (loop8): 1 truncate cleaned up [ 644.784778][ T5272] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 644.910109][ T5272] input: syz0 as /devices/virtual/input/input42 [ 644.960536][ T5272] input: syz1 as /devices/virtual/input/input43 [ 644.970777][ T5286] loop9: detected capacity change from 0 to 512 [ 645.004683][ T5286] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1176: casefold flag without casefold feature [ 645.018581][ T5286] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1176: couldn't read orphan inode 15 (err -117) [ 645.030972][ T5286] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 645.130072][ T5291] 9pnet: Insufficient options for proto=fd [ 650.058565][ T5295] overlayfs: './file0' not a directory [ 650.343038][ T5312] loop2: detected capacity change from 0 to 512 [ 650.444569][ T5319] loop9: detected capacity change from 0 to 512 [ 650.991927][ T5320] loop8: detected capacity change from 0 to 4096 [ 654.488499][ T5320] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 654.528976][ T5320] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 654.536346][ T5320] EXT4-fs (loop8): Test dummy encryption mode enabled [ 654.543203][ T5320] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 654.543203][ T5320] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 654.543203][ T5320] [ 654.565385][ T5312] EXT4-fs: failed to create workqueue [ 654.571135][ T5312] EXT4-fs (loop2): mount failed [ 654.603131][ T5319] EXT4-fs: failed to create workqueue [ 654.608645][ T5319] EXT4-fs (loop9): mount failed [ 654.981138][ T5332] device syzkaller0 entered promiscuous mode [ 655.333822][ T5342] loop8: detected capacity change from 0 to 512 [ 656.703181][ T5349] loop4: detected capacity change from 0 to 4096 [ 656.724778][ T5342] EXT4-fs (loop8): 1 orphan inode deleted [ 656.730615][ T5342] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 656.741860][ T5342] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.742022][ T5349] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 656.771671][ T5349] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 656.779042][ T5349] EXT4-fs (loop4): Test dummy encryption mode enabled [ 656.785874][ T5349] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 656.785874][ T5349] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 656.785874][ T5349] [ 656.851176][ T5357] loop9: detected capacity change from 0 to 512 [ 660.915660][ T5357] EXT4-fs warning (device loop9): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop9. [ 661.406940][ T5367] loop7: detected capacity change from 0 to 512 [ 664.026763][ T5370] loop4: detected capacity change from 0 to 512 [ 664.261575][ T5371] loop2: detected capacity change from 0 to 512 [ 667.168676][ T5367] EXT4-fs warning (device loop7): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop7. [ 667.235051][ T5371] EXT4-fs: failed to create workqueue [ 667.240557][ T5371] EXT4-fs (loop2): mount failed [ 667.257854][ T5370] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 667.305950][ T5378] loop8: detected capacity change from 0 to 512 [ 667.354918][ T5378] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1195: casefold flag without casefold feature [ 667.368192][ T5378] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1195: couldn't read orphan inode 15 (err -117) [ 667.380510][ T5378] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 668.530001][ T5394] loop9: detected capacity change from 0 to 512 [ 668.715866][ T5394] EXT4-fs (loop9): 1 orphan inode deleted [ 668.721789][ T5394] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 668.733377][ T5394] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 668.759087][ T5390] device syzkaller0 entered promiscuous mode [ 668.794733][ T5398] loop2: detected capacity change from 0 to 512 [ 668.912997][ T5398] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1203: casefold flag without casefold feature [ 668.926095][ T5398] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1203: couldn't read orphan inode 15 (err -117) [ 668.938314][ T5398] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 669.738730][ T5404] 9pnet: Insufficient options for proto=fd [ 671.505250][ T5415] loop9: detected capacity change from 0 to 512 [ 671.646812][ T5421] loop2: detected capacity change from 0 to 512 [ 671.826212][ T5415] EXT4-fs (loop9): 1 orphan inode deleted [ 671.832223][ T5415] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 671.843739][ T5415] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.084647][ T5421] EXT4-fs (loop2): 1 orphan inode deleted [ 672.090491][ T5421] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 672.101967][ T5421] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.532422][ T5426] loop4: detected capacity change from 0 to 512 [ 672.738140][ T5426] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 672.745410][ T5426] EXT4-fs (loop4): Test dummy encryption mode enabled [ 672.752348][ T5426] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 672.759525][ T5426] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 672.770991][ T5426] EXT4-fs (loop4): 1 truncate cleaned up [ 672.776793][ T5426] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 672.805747][ T5426] input: syz0 as /devices/virtual/input/input44 [ 672.868466][ T5436] loop7: detected capacity change from 0 to 512 [ 672.901968][ T5426] input: syz1 as /devices/virtual/input/input45 [ 673.037134][ T5441] loop9: detected capacity change from 0 to 512 [ 673.131271][ T5436] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 673.991520][ T5447] loop4: detected capacity change from 0 to 512 [ 674.024991][ T5441] EXT4-fs (loop9): 1 orphan inode deleted [ 674.030830][ T5441] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 674.042334][ T5441] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.584983][ T5436] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.1213: invalid block [ 674.778857][ T5436] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1213: invalid indirect mapped block 4294967295 (level 1) [ 674.853964][ T5447] EXT4-fs (loop4): 1 orphan inode deleted [ 674.859910][ T5447] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 674.871316][ T5447] ext4 filesystem being mounted at /263/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.995382][ T5436] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1213: invalid indirect mapped block 4294967295 (level 1) [ 675.069138][ T5436] EXT4-fs (loop7): 2 truncates cleaned up [ 675.157012][ T5436] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 675.332954][ T5458] loop4: detected capacity change from 0 to 512 [ 675.379888][ T5458] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 675.387111][ T5458] EXT4-fs (loop4): Test dummy encryption mode enabled [ 675.439681][ T5458] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 675.446847][ T5458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 675.471221][ T5461] loop2: detected capacity change from 0 to 512 [ 675.488040][ T5458] EXT4-fs (loop4): 1 truncate cleaned up [ 675.537121][ T5458] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 675.572565][ T5464] loop7: detected capacity change from 0 to 4096 [ 675.605761][ T5461] EXT4-fs (loop2): 1 orphan inode deleted [ 675.618558][ T5464] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 675.628559][ T5464] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 675.635867][ T5464] EXT4-fs (loop7): Test dummy encryption mode enabled [ 675.642733][ T5464] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 675.642733][ T5464] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 675.642733][ T5464] [ 675.703565][ T5458] input: syz0 as /devices/virtual/input/input46 [ 675.722665][ T5458] input: syz1 as /devices/virtual/input/input47 [ 675.731880][ T5461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 675.778914][ T5461] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.305823][ T30] audit: type=1400 audit(1759867350.495:296): avc: denied { ioctl } for pid=5470 comm="syz.7.1219" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 676.306114][ T5472] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 676.567367][ T5477] loop9: detected capacity change from 0 to 512 [ 677.191216][ T5477] EXT4-fs (loop9): 1 orphan inode deleted [ 677.197041][ T5477] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 677.208631][ T5477] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.720458][ T5483] loop4: detected capacity change from 0 to 512 [ 678.584972][ T5483] EXT4-fs (loop4): orphan cleanup on readonly fs [ 678.593286][ T5483] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 678.603596][ T5483] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 678.613061][ T5483] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1221: Failed to acquire dquot type 1 [ 678.626353][ T5483] EXT4-fs (loop4): 1 truncate cleaned up [ 678.632368][ T5483] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 679.324485][ T5495] 9pnet: Insufficient options for proto=fd [ 679.646719][ T5496] loop9: detected capacity change from 0 to 512 [ 679.720786][ T5498] loop4: detected capacity change from 0 to 512 [ 679.866095][ T5496] EXT4-fs (loop9): orphan cleanup on readonly fs [ 679.874532][ T5496] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 679.884933][ T5496] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 679.894532][ T5496] EXT4-fs error (device loop9): ext4_acquire_dquot:6200: comm syz.9.1224: Failed to acquire dquot type 1 [ 679.909668][ T5496] EXT4-fs (loop9): 1 truncate cleaned up [ 679.938892][ T5496] EXT4-fs (loop9): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 680.706004][ T5498] EXT4-fs (loop4): 1 orphan inode deleted [ 680.711844][ T5498] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 680.722908][ T5498] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 681.014970][ T5507] loop7: detected capacity change from 0 to 512 [ 681.605348][ T30] audit: type=1400 audit(1759867355.555:297): avc: denied { unlink } for pid=5506 comm="syz.8.1228" name="#6b" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 682.047352][ T5507] EXT4-fs (loop7): orphan cleanup on readonly fs [ 682.072025][ T30] audit: type=1400 audit(1759867355.605:298): avc: denied { create } for pid=5506 comm="syz.8.1228" name="#6d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 682.097193][ T5507] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 682.107530][ T5507] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 682.116960][ T5507] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1227: Failed to acquire dquot type 1 [ 682.129891][ T30] audit: type=1400 audit(1759867355.605:299): avc: denied { link } for pid=5506 comm="syz.8.1228" name="#6d" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 682.142545][ T5507] EXT4-fs (loop7): 1 truncate cleaned up [ 682.152874][ T30] audit: type=1400 audit(1759867355.605:300): avc: denied { rename } for pid=5506 comm="syz.8.1228" name="#6e" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 682.272364][ T5507] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 682.301800][ T30] audit: type=1400 audit(1759867356.315:301): avc: denied { unmount } for pid=4086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 682.615577][ T30] audit: type=1326 audit(1759867356.645:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 682.656185][ T30] audit: type=1326 audit(1759867356.645:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 682.702946][ T30] audit: type=1326 audit(1759867356.655:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5514 comm="syz.4.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff560892710 code=0x7ffc0000 [ 683.268333][ T403] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 683.282567][ T5535] loop4: detected capacity change from 0 to 512 [ 684.029267][ T5535] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 684.080139][ T5535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1236: invalid indirect mapped block 4294967295 (level 1) [ 684.094783][ T5535] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1236: invalid indirect mapped block 4294967295 (level 1) [ 684.109308][ T5535] EXT4-fs (loop4): 2 truncates cleaned up [ 684.115214][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 685.067976][ T5552] loop9: detected capacity change from 0 to 4096 [ 685.128519][ T5552] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 685.137879][ T5552] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 685.145281][ T5552] EXT4-fs (loop9): Test dummy encryption mode enabled [ 685.152188][ T5552] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 685.152188][ T5552] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 685.152188][ T5552] [ 685.257469][ T5556] loop4: detected capacity change from 0 to 512 [ 686.316149][ T5558] loop2: detected capacity change from 0 to 512 [ 686.546111][ T5556] EXT4-fs (loop4): orphan cleanup on readonly fs [ 686.851155][ T5556] __quota_error: 3 callbacks suppressed [ 686.851184][ T5556] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 686.867110][ T5556] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 686.876574][ T5556] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1240: Failed to acquire dquot type 1 [ 686.893995][ T5556] EXT4-fs (loop4): 1 truncate cleaned up [ 686.900318][ T5556] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 687.452953][ T5558] EXT4-fs (loop2): 1 orphan inode deleted [ 687.458895][ T5558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 687.470418][ T5558] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.598338][ T403] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 687.613237][ T403] usb 9-1: can't read configurations, error -71 [ 687.738969][ T5572] loop4: detected capacity change from 0 to 512 [ 687.852113][ T5575] loop8: detected capacity change from 0 to 512 [ 687.883566][ T5572] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1244: casefold flag without casefold feature [ 687.896746][ T5572] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1244: couldn't read orphan inode 15 (err -117) [ 687.912941][ T5572] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 688.125833][ T5575] EXT4-fs (loop8): 1 orphan inode deleted [ 688.131671][ T5575] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 688.143133][ T5575] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 689.258919][ T30] audit: type=1400 audit(1759867363.325:308): avc: denied { remount } for pid=5587 comm="syz.2.1248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 689.279723][ T30] audit: type=1400 audit(1759867363.335:309): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 689.473560][ T5592] loop2: detected capacity change from 0 to 512 [ 689.610064][ T5592] EXT4-fs (loop2): 1 orphan inode deleted [ 689.615886][ T5592] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 689.627366][ T5592] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.112053][ T5605] loop4: detected capacity change from 0 to 512 [ 691.283887][ T5608] loop8: detected capacity change from 0 to 512 [ 691.291427][ T5605] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 691.305912][ T5605] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1251: invalid block [ 691.318173][ T5605] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1251: invalid indirect mapped block 4294967295 (level 1) [ 691.332295][ T5605] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1251: invalid indirect mapped block 4294967295 (level 1) [ 691.377795][ T5605] EXT4-fs (loop4): 2 truncates cleaned up [ 691.417208][ T5605] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 691.482702][ T5608] EXT4-fs (loop8): 1 orphan inode deleted [ 691.488522][ T5608] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 691.499690][ T5608] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.560076][ T5621] loop4: detected capacity change from 0 to 512 [ 691.633432][ T5624] loop7: detected capacity change from 0 to 512 [ 691.728602][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 691.737679][ T5621] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 691.765162][ T5624] EXT4-fs (loop7): orphan cleanup on readonly fs [ 691.774023][ T5624] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 691.784387][ T5624] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 691.793830][ T5624] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1255: Failed to acquire dquot type 1 [ 691.810569][ T5624] EXT4-fs (loop7): 1 truncate cleaned up [ 691.816762][ T5624] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 692.132609][ T5621] EXT4-fs (loop4): Test dummy encryption mode enabled [ 692.633404][ T5621] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 692.669901][ T5621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 692.701186][ T5621] EXT4-fs (loop4): 1 truncate cleaned up [ 692.710807][ T5621] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 693.664635][ T5635] loop7: detected capacity change from 0 to 512 [ 693.671803][ T60] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 693.706733][ T5621] input: syz0 as /devices/virtual/input/input48 [ 693.769288][ T5635] EXT4-fs (loop7): orphan cleanup on readonly fs [ 693.776089][ T5635] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 693.786422][ T5635] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 693.796031][ T5635] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1259: Failed to acquire dquot type 1 [ 693.810394][ T5635] EXT4-fs (loop7): 1 truncate cleaned up [ 693.987737][ T60] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 694.044077][ T5639] device syzkaller0 entered promiscuous mode [ 694.144970][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.294800][ T60] usb 10-1: config 0 descriptor?? [ 694.367827][ T5635] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 694.478832][ T60] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 694.596661][ T60] usb 10-1: USB disconnect, device number 2 [ 695.784239][ T5652] loop7: detected capacity change from 0 to 512 [ 696.390698][ T5654] loop2: detected capacity change from 0 to 512 [ 697.285339][ T5658] loop8: detected capacity change from 0 to 512 [ 697.397452][ T5652] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 697.440837][ T5652] EXT4-fs (loop7): Test dummy encryption mode enabled [ 697.729670][ T5654] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 697.746422][ T5652] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 697.748060][ T5661] loop9: detected capacity change from 0 to 512 [ 697.754885][ T5652] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 697.771532][ T5652] EXT4-fs (loop7): 1 truncate cleaned up [ 697.772382][ T5658] EXT4-fs (loop8): 1 orphan inode deleted [ 697.777258][ T5652] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 697.783008][ T5658] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 697.812387][ T5658] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.204392][ T5661] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 698.636691][ T5672] loop2: detected capacity change from 0 to 512 [ 698.643896][ T5661] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.1266: invalid block [ 698.728598][ T5672] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 698.771923][ T5652] input: syz0 as /devices/virtual/input/input49 [ 698.781736][ T5652] input: syz1 as /devices/virtual/input/input50 [ 698.794181][ T5661] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1266: invalid indirect mapped block 4294967295 (level 1) [ 698.796587][ T5672] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1267: invalid indirect mapped block 4294967295 (level 1) [ 698.945835][ T30] audit: type=1326 audit(1759867373.115:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 698.978881][ T5661] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1266: invalid indirect mapped block 4294967295 (level 1) [ 698.993650][ T5672] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1267: invalid indirect mapped block 4294967295 (level 1) [ 699.071295][ T30] audit: type=1326 audit(1759867373.115:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 699.097452][ T5661] EXT4-fs (loop9): 2 truncates cleaned up [ 699.103483][ T5672] EXT4-fs (loop2): 2 truncates cleaned up [ 699.123472][ T30] audit: type=1326 audit(1759867373.125:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff560892710 code=0x7ffc0000 [ 699.217357][ T5661] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 699.219973][ T5672] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 699.315283][ T30] audit: type=1326 audit(1759867373.125:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff560892710 code=0x7ffc0000 [ 699.372241][ T5683] loop8: detected capacity change from 0 to 512 [ 699.641411][ T5683] EXT4-fs (loop8): 1 orphan inode deleted [ 699.647251][ T5683] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 699.658635][ T5683] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.850636][ T30] audit: type=1326 audit(1759867373.125:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 700.338683][ T30] audit: type=1326 audit(1759867373.135:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5669 comm="syz.4.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 700.438849][ T5692] loop9: detected capacity change from 0 to 512 [ 700.477030][ T5692] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 700.493176][ T5692] EXT4-fs (loop9): Test dummy encryption mode enabled [ 700.500201][ T5692] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 700.507373][ T5692] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 700.539837][ T5697] loop4: detected capacity change from 0 to 512 [ 700.558172][ T5694] device syzkaller0 entered promiscuous mode [ 700.561535][ T5692] EXT4-fs (loop9): 1 truncate cleaned up [ 700.569964][ T5692] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 700.597482][ T5692] input: syz0 as /devices/virtual/input/input51 [ 700.615201][ T5697] EXT4-fs (loop4): 1 orphan inode deleted [ 700.621121][ T5697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 700.632283][ T5697] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.799122][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 700.814043][ T5692] input: syz1 as /devices/virtual/input/input52 [ 702.752067][ T5715] loop9: detected capacity change from 0 to 512 [ 702.758873][ T30] audit: type=1326 audit(1759867376.105:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 702.878411][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 702.953118][ T5715] EXT4-fs (loop9): orphan cleanup on readonly fs [ 702.961442][ T5715] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 702.971797][ T5715] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 702.981309][ T5715] EXT4-fs error (device loop9): ext4_acquire_dquot:6200: comm syz.9.1277: Failed to acquire dquot type 1 [ 702.995973][ T5715] EXT4-fs (loop9): 1 truncate cleaned up [ 703.477717][ T60] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 703.748589][ T30] audit: type=1326 audit(1759867376.105:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 704.565749][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.576983][ T60] usb 8-1: config 0 descriptor?? [ 704.584129][ T5715] EXT4-fs (loop9): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 704.863762][ T60] usb 8-1: can't set config #0, error -71 [ 704.870120][ T60] usb 8-1: USB disconnect, device number 4 [ 704.898745][ T30] audit: type=1326 audit(1759867376.105:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 704.924293][ T30] audit: type=1326 audit(1759867376.105:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 704.948437][ T30] audit: type=1326 audit(1759867376.105:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.4.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 705.332059][ T5738] loop7: detected capacity change from 0 to 512 [ 705.369148][ T5734] loop2: detected capacity change from 0 to 512 [ 705.377532][ T5736] loop4: detected capacity change from 0 to 512 [ 705.397798][ T5721] device syzkaller0 entered promiscuous mode [ 705.417690][ T30] audit: type=1326 audit(1759867378.755:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 705.472428][ T5738] EXT4-fs (loop7): orphan cleanup on readonly fs [ 705.480732][ T5738] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present [ 705.491099][ T5738] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 705.500655][ T5738] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.1282: Failed to acquire dquot type 1 [ 705.515143][ T5738] EXT4-fs (loop7): 1 truncate cleaned up [ 705.521257][ T5738] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 705.626625][ T5734] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 705.671155][ T5736] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 706.046204][ T30] audit: type=1326 audit(1759867378.755:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 706.072551][ T30] audit: type=1326 audit(1759867378.755:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 706.091046][ T5734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1283: invalid indirect mapped block 4294967295 (level 1) [ 706.096345][ T5715] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 706.119296][ T5715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 706.160615][ T30] audit: type=1326 audit(1759867378.755:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 706.186064][ T5734] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1283: invalid indirect mapped block 4294967295 (level 1) [ 706.188439][ T5736] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1284: invalid indirect mapped block 4294967295 (level 1) [ 706.214126][ T30] audit: type=1326 audit(1759867378.755:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5726 comm="syz.4.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 706.237937][ T5736] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1284: invalid indirect mapped block 4294967295 (level 1) [ 706.253979][ T5734] EXT4-fs (loop2): 2 truncates cleaned up [ 706.264532][ T5734] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 706.288350][ T5736] EXT4-fs (loop4): 2 truncates cleaned up [ 706.294288][ T5736] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 706.656642][ T5752] loop7: detected capacity change from 0 to 512 [ 711.087506][ T5766] loop2: detected capacity change from 0 to 512 [ 712.968658][ T5769] loop4: detected capacity change from 0 to 512 [ 713.521218][ T5769] EXT4-fs (loop4): orphan cleanup on readonly fs [ 713.529875][ T5769] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 713.540210][ T5769] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 713.549657][ T5769] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1290: Failed to acquire dquot type 1 [ 713.563785][ T5769] EXT4-fs (loop4): 1 truncate cleaned up [ 713.571302][ T5769] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 713.603541][ T5766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 713.612175][ T5766] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 713.622537][ T5766] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 713.631967][ T5766] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.1288: Failed to acquire dquot type 1 [ 713.645667][ T5766] EXT4-fs (loop2): 1 truncate cleaned up [ 713.653787][ T5766] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 713.742248][ T30] audit: type=1400 audit(1759867387.935:326): avc: denied { read write } for pid=5773 comm="syz.8.1294" name="fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 713.778720][ T30] audit: type=1400 audit(1759867387.955:327): avc: denied { open } for pid=5773 comm="syz.8.1294" path="/dev/fuse" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 713.885500][ T30] audit: type=1400 audit(1759867387.955:328): avc: denied { mounton } for pid=5773 comm="syz.8.1294" path="/74/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 714.998374][ T5732] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 715.053292][ T5790] loop2: detected capacity change from 0 to 512 [ 715.087147][ T30] audit: type=1400 audit(1759867389.255:329): avc: denied { unmount } for pid=4086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 715.183255][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1296: casefold flag without casefold feature [ 716.047865][ T5786] loop9: detected capacity change from 0 to 4096 [ 716.430538][ T5805] loop8: detected capacity change from 0 to 512 [ 716.448928][ T30] audit: type=1326 audit(1759867390.065:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 716.474550][ T5790] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1296: couldn't read orphan inode 15 (err -117) [ 716.488981][ T5790] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 716.503925][ T5786] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 716.515138][ T5786] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 716.522497][ T5786] EXT4-fs (loop9): Test dummy encryption mode enabled [ 716.529313][ T5786] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 716.529313][ T5786] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 716.529313][ T5786] [ 716.724649][ T5805] EXT4-fs (loop8): 1 orphan inode deleted [ 716.730479][ T5805] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 716.741997][ T5805] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.351593][ T5810] loop4: detected capacity change from 0 to 512 [ 717.375763][ T30] audit: type=1326 audit(1759867390.065:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5784 comm="syz.4.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 717.544627][ T5810] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1302: casefold flag without casefold feature [ 717.557978][ T5810] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1302: couldn't read orphan inode 15 (err -117) [ 717.570013][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 718.610099][ T5818] overlayfs: failed to resolve './file0': -2 [ 719.355207][ T5827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1304'. [ 719.915119][ T5835] loop4: detected capacity change from 0 to 512 [ 720.021764][ T5835] EXT4-fs (loop4): 1 orphan inode deleted [ 720.027564][ T5835] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 720.038661][ T5835] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.087965][ T60] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 721.334191][ T5847] loop8: detected capacity change from 0 to 512 [ 721.644361][ T5845] loop7: detected capacity change from 0 to 512 [ 723.442447][ T5849] loop9: detected capacity change from 0 to 512 [ 726.625645][ T5857] loop2: detected capacity change from 0 to 512 [ 727.036066][ T5863] loop7: detected capacity change from 0 to 4096 [ 727.311024][ T5857] EXT4-fs (loop2): 1 orphan inode deleted [ 727.316826][ T5857] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 727.327886][ T5857] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 727.378576][ T5863] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 727.388464][ T5863] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 727.395953][ T5863] EXT4-fs (loop7): Test dummy encryption mode enabled [ 727.403032][ T5863] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 727.403032][ T5863] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 727.403032][ T5863] [ 728.408499][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1320'. [ 728.549722][ T5884] loop8: detected capacity change from 0 to 512 [ 729.040457][ T5884] EXT4-fs (loop8): 1 orphan inode deleted [ 729.046332][ T5884] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 729.057502][ T5884] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.706590][ T5898] loop9: detected capacity change from 0 to 512 [ 729.786947][ T5901] loop2: detected capacity change from 0 to 512 [ 730.147187][ T5910] loop4: detected capacity change from 0 to 512 [ 730.169558][ T5901] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1324: casefold flag without casefold feature [ 730.170852][ T5898] EXT4-fs (loop9): 1 orphan inode deleted [ 730.188015][ T5898] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 730.199443][ T5898] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 730.987566][ T5913] loop8: detected capacity change from 0 to 512 [ 730.994276][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 731.046800][ T5901] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1324: couldn't read orphan inode 15 (err -117) [ 731.060639][ T5901] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 731.154409][ T5913] EXT4-fs (loop8): orphan cleanup on readonly fs [ 731.162968][ T5913] __quota_error: 7 callbacks suppressed [ 731.162992][ T5913] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 731.178910][ T5913] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 731.188354][ T5913] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1326: Failed to acquire dquot type 1 [ 731.202548][ T5913] EXT4-fs (loop8): 1 truncate cleaned up [ 731.211107][ T5913] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 731.242417][ T5910] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1327: casefold flag without casefold feature [ 731.255647][ T5910] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1327: couldn't read orphan inode 15 (err -117) [ 731.268060][ T5910] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 731.793577][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.879165][ T60] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 732.375289][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.399458][ T60] usb 8-1: config 0 descriptor?? [ 732.448846][ T60] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 732.478889][ T5922] loop9: detected capacity change from 0 to 4096 [ 732.497501][ T5922] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 732.654871][ T5922] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 732.662308][ T5922] EXT4-fs (loop9): Test dummy encryption mode enabled [ 732.677521][ T5922] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 732.677521][ T5922] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 732.677521][ T5922] [ 734.299968][ T5934] loop2: detected capacity change from 0 to 4096 [ 734.388144][ T5931] loop8: detected capacity change from 0 to 4096 [ 734.399892][ T5934] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 734.419655][ T5931] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 734.434461][ T5934] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 734.442713][ T5934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 734.449786][ T5934] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 734.449786][ T5934] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 734.449786][ T5934] [ 734.469837][ T5931] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 734.478065][ T5931] EXT4-fs (loop8): Test dummy encryption mode enabled [ 734.485074][ T5931] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 734.485074][ T5931] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 734.485074][ T5931] [ 734.543535][ T5914] usb 8-1: USB disconnect, device number 5 [ 734.685197][ T5939] loop7: detected capacity change from 0 to 512 [ 736.079206][ T5957] loop2: detected capacity change from 0 to 512 [ 736.103057][ T5939] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1333: casefold flag without casefold feature [ 736.116500][ T5939] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1333: couldn't read orphan inode 15 (err -117) [ 736.429917][ T5939] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 737.590567][ T5957] EXT4-fs (loop2): 1 orphan inode deleted [ 737.596392][ T5957] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 737.607825][ T5957] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.737699][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1337'. [ 738.192154][ T5967] loop4: detected capacity change from 0 to 512 [ 738.950744][ T5969] loop8: detected capacity change from 0 to 512 [ 738.958752][ T5967] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 738.966791][ T5967] EXT4-fs (loop4): Test dummy encryption mode enabled [ 739.880468][ T5969] EXT4-fs (loop8): 1 orphan inode deleted [ 739.886277][ T5969] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 739.897903][ T5969] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.962085][ T5967] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 740.360964][ T5977] loop9: detected capacity change from 0 to 512 [ 740.434467][ T5977] EXT4-fs (loop9): orphan cleanup on readonly fs [ 740.442566][ T5977] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 740.452917][ T5977] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 740.462447][ T5977] EXT4-fs error (device loop9): ext4_acquire_dquot:6200: comm syz.9.1342: Failed to acquire dquot type 1 [ 740.476386][ T5977] EXT4-fs (loop9): 1 truncate cleaned up [ 740.482687][ T5977] EXT4-fs (loop9): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 740.740822][ T5967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 740.759036][ T5967] EXT4-fs (loop4): 1 truncate cleaned up [ 740.764712][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 741.421378][ T598] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 741.486591][ T5988] loop2: detected capacity change from 0 to 512 [ 741.802629][ T5988] EXT4-fs (loop2): orphan cleanup on readonly fs [ 741.809729][ T5988] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 741.820429][ T5988] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 741.829923][ T5988] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.1341: Failed to acquire dquot type 1 [ 741.844268][ T5988] EXT4-fs (loop2): 1 truncate cleaned up [ 741.850361][ T5988] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 742.867178][ T5998] loop9: detected capacity change from 0 to 512 [ 744.342309][ T6002] loop4: detected capacity change from 0 to 512 [ 745.634579][ T30] audit: type=1326 audit(1759867419.125:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 745.917260][ T5998] EXT4-fs (loop9): 1 orphan inode deleted [ 745.923158][ T5998] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 745.934192][ T598] usb 9-1: unable to read config index 0 descriptor/all [ 745.934221][ T598] usb 9-1: can't read configurations, error -71 [ 745.948141][ T5998] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.001892][ T30] audit: type=1326 audit(1759867419.125:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.012396][ T6002] EXT4-fs (loop4): 1 orphan inode deleted [ 746.031182][ T6002] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 746.031214][ T30] audit: type=1326 audit(1759867419.155:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62ba544710 code=0x7ffc0000 [ 746.042261][ T6002] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.082532][ T30] audit: type=1326 audit(1759867419.165:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62ba544710 code=0x7ffc0000 [ 746.145379][ T30] audit: type=1326 audit(1759867419.165:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.204811][ T6023] loop8: detected capacity change from 0 to 512 [ 746.215114][ T30] audit: type=1326 audit(1759867419.165:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.240921][ T6023] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 746.253673][ T6023] EXT4-fs (loop8): Test dummy encryption mode enabled [ 746.264074][ T6023] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 746.271484][ T6023] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 746.275911][ T30] audit: type=1326 audit(1759867419.215:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.283396][ T6023] EXT4-fs (loop8): 1 truncate cleaned up [ 746.317368][ T6023] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 746.335802][ T30] audit: type=1326 audit(1759867419.215:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.359444][ T30] audit: type=1326 audit(1759867419.225:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6005 comm="syz.7.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 746.359539][ T6028] loop7: detected capacity change from 0 to 512 [ 746.410631][ T6027] loop9: detected capacity change from 0 to 512 [ 746.488004][ T6027] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1353: casefold flag without casefold feature [ 746.501084][ T6027] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1353: couldn't read orphan inode 15 (err -117) [ 746.513806][ T6027] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 747.961415][ T6036] loop4: detected capacity change from 0 to 512 [ 749.526139][ T6028] EXT4-fs: failed to create workqueue [ 749.531682][ T6028] EXT4-fs (loop7): mount failed [ 749.541593][ T6023] input: syz1 as /devices/virtual/input/input54 [ 749.671273][ T6036] EXT4-fs (loop4): orphan cleanup on readonly fs [ 749.678084][ T6036] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 749.688641][ T6036] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.1354: Failed to acquire dquot type 1 [ 749.700755][ T6036] EXT4-fs (loop4): 1 truncate cleaned up [ 749.706649][ T6036] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 749.793480][ T6042] loop8: detected capacity change from 0 to 256 [ 749.853769][ T6042] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 750.222722][ T6050] loop9: detected capacity change from 0 to 256 [ 750.237074][ T6049] loop4: detected capacity change from 0 to 512 [ 750.325227][ T6055] loop2: detected capacity change from 0 to 512 [ 750.356960][ T6050] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 750.920324][ T6049] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1356: casefold flag without casefold feature [ 750.934703][ T6049] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1356: couldn't read orphan inode 15 (err -117) [ 750.948131][ T6049] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 750.949189][ T6055] EXT4-fs (loop2): 1 orphan inode deleted [ 750.968485][ T6055] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 750.979833][ T6055] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.791578][ T6065] loop2: detected capacity change from 0 to 512 [ 751.818299][ T351] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 752.629432][ T6065] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1361: casefold flag without casefold feature [ 752.642804][ T6065] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1361: couldn't read orphan inode 15 (err -117) [ 752.654872][ T6065] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 752.803445][ T6076] tipc: Enabling of bearer rejected, failed to enable media [ 752.827139][ T6076] device syzkaller0 entered promiscuous mode [ 753.198544][ T351] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.618308][ T351] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 753.628640][ T351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.637268][ T351] usb 9-1: config 0 descriptor?? [ 753.760091][ T351] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 753.784896][ T6082] device syzkaller0 entered promiscuous mode [ 754.260115][ T6088] device syzkaller0 entered promiscuous mode [ 754.456895][ T6095] loop9: detected capacity change from 0 to 512 [ 755.177540][ T6095] EXT4-fs (loop9): 1 orphan inode deleted [ 755.183394][ T6095] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 755.194867][ T6095] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 755.285261][ T6101] loop7: detected capacity change from 0 to 256 [ 755.675825][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 755.708845][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 755.723033][ T6101] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 755.754313][ T6107] loop9: detected capacity change from 0 to 512 [ 755.821735][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 755.865475][ T6107] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1372: casefold flag without casefold feature [ 755.882790][ T6107] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1372: couldn't read orphan inode 15 (err -117) [ 755.891782][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 755.908758][ T6107] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 756.018251][ T6116] overlayfs: failed to resolve './file1': -2 [ 758.054546][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 758.107471][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 758.136381][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 758.166602][ T1667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 758.281638][ T5642] usb 9-1: USB disconnect, device number 8 [ 758.591533][ T6135] loop8: detected capacity change from 0 to 512 [ 758.687827][ T6115] device syzkaller0 entered promiscuous mode [ 759.277400][ T6135] EXT4-fs (loop8): 1 orphan inode deleted [ 759.283265][ T6135] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 759.294936][ T6135] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.828817][ T6148] loop9: detected capacity change from 0 to 256 [ 759.927589][ T6148] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 759.965524][ T6151] loop8: detected capacity change from 0 to 512 [ 760.261090][ T6151] EXT4-fs error (device loop8): ext4_orphan_get:1401: inode #15: comm syz.8.1381: casefold flag without casefold feature [ 760.273937][ T6151] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1381: couldn't read orphan inode 15 (err -117) [ 760.286012][ T6151] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 761.185191][ T6160] 9pnet: Insufficient options for proto=fd [ 761.292401][ T6163] device syzkaller0 entered promiscuous mode [ 761.524422][ T6166] loop7: detected capacity change from 0 to 256 [ 761.648750][ T6166] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 762.708398][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 762.708418][ T30] audit: type=1326 audit(1759867436.115:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 763.738331][ T30] audit: type=1326 audit(1759867436.115:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 763.768266][ T30] audit: type=1326 audit(1759867436.145:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5322538710 code=0x7ffc0000 [ 763.889603][ T6180] loop8: detected capacity change from 0 to 512 [ 764.061867][ T6180] EXT4-fs (loop8): orphan cleanup on readonly fs [ 764.070480][ T6180] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 764.080792][ T6180] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 764.090234][ T6180] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1386: Failed to acquire dquot type 1 [ 764.105288][ T6180] EXT4-fs (loop8): 1 truncate cleaned up [ 764.111690][ T6180] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 764.768257][ T30] audit: type=1326 audit(1759867436.145:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5322538710 code=0x7ffc0000 [ 764.791841][ T30] audit: type=1326 audit(1759867436.155:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 764.815951][ T30] audit: type=1326 audit(1759867436.155:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 764.848420][ T30] audit: type=1326 audit(1759867436.185:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 764.918303][ T6172] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 764.921753][ T30] audit: type=1326 audit(1759867436.195:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6167 comm="syz.8.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5322539ec9 code=0x7ffc0000 [ 765.125185][ T6188] loop2: detected capacity change from 0 to 512 [ 766.221080][ T6188] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 766.238490][ T6188] EXT4-fs (loop2): Test dummy encryption mode enabled [ 766.347506][ T6193] loop4: detected capacity change from 0 to 512 [ 766.372714][ T6188] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 766.388594][ T6172] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 766.510838][ T6193] EXT4-fs (loop4): 1 orphan inode deleted [ 766.516668][ T6193] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 766.528163][ T6193] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.194315][ T6172] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 767.203727][ T6188] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 767.230530][ T6200] loop7: detected capacity change from 0 to 512 [ 767.247485][ T6172] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.267805][ T6188] EXT4-fs (loop2): 1 truncate cleaned up [ 767.288729][ T6200] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1392: casefold flag without casefold feature [ 767.302437][ T6200] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1392: couldn't read orphan inode 15 (err -117) [ 767.315009][ T6200] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 767.336819][ T6172] usb 8-1: config 0 descriptor?? [ 767.338342][ T6188] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 767.425301][ T6172] usb 8-1: can't set config #0, error -71 [ 767.434034][ T6172] usb 8-1: USB disconnect, device number 6 [ 767.451978][ T6197] loop8: detected capacity change from 0 to 512 [ 767.461363][ T6188] input: syz1 as /devices/virtual/input/input56 [ 769.124420][ T6214] loop9: detected capacity change from 0 to 512 [ 769.427505][ T6197] EXT4-fs warning (device loop8): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop8. [ 769.610919][ T6214] EXT4-fs (loop9): 1 orphan inode deleted [ 769.616770][ T6214] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 769.628268][ T6214] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.771021][ T6211] loop4: detected capacity change from 0 to 4096 [ 770.169759][ T6211] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 770.537939][ T6225] loop7: detected capacity change from 0 to 4096 [ 770.652474][ T6211] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 770.661042][ T6225] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 770.674079][ T6211] EXT4-fs (loop4): Test dummy encryption mode enabled [ 770.681264][ T6211] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 770.681264][ T6211] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 770.681264][ T6211] [ 770.938248][ T6229] loop8: detected capacity change from 0 to 512 [ 770.946197][ T6225] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 770.953513][ T6225] EXT4-fs (loop7): Test dummy encryption mode enabled [ 770.960435][ T6225] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 770.960435][ T6225] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 770.960435][ T6225] [ 771.986852][ T6229] EXT4-fs (loop8): 1 orphan inode deleted [ 771.992734][ T6229] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 772.004222][ T6229] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.205419][ T6240] loop7: detected capacity change from 0 to 512 [ 772.500102][ T6240] EXT4-fs (loop7): 1 orphan inode deleted [ 772.505876][ T6240] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 772.516998][ T6240] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.670969][ T6251] 9pnet: Insufficient options for proto=fd [ 772.902672][ T6252] loop9: detected capacity change from 0 to 512 [ 773.866142][ T6255] loop8: detected capacity change from 0 to 512 [ 773.952306][ T6252] EXT4-fs (loop9): 1 orphan inode deleted [ 773.958156][ T6252] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 773.969714][ T6252] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.031508][ T6259] loop7: detected capacity change from 0 to 256 [ 775.039830][ T6255] EXT4-fs (loop8): 1 orphan inode deleted [ 775.045596][ T6255] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 775.056824][ T6255] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.102366][ T332] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 775.171200][ T6259] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 776.998834][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 776.998875][ T30] audit: type=1400 audit(1759867451.165:369): avc: denied { read open } for pid=6258 comm="syz.7.1404" path="/94/file0/sched_switch" dev="loop7" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 777.556345][ T6272] loop8: detected capacity change from 0 to 256 [ 778.868977][ T6278] loop9: detected capacity change from 0 to 512 [ 779.046638][ T6278] EXT4-fs (loop9): 1 orphan inode deleted [ 779.052605][ T6278] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 779.064140][ T6278] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.186477][ T6272] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 779.872965][ T6288] loop7: detected capacity change from 0 to 512 [ 779.957897][ T30] audit: type=1326 audit(1759867454.145:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 780.106041][ T6288] EXT4-fs (loop7): 1 orphan inode deleted [ 780.111925][ T6288] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 780.123706][ T6288] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.839471][ T30] audit: type=1326 audit(1759867454.145:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 782.086143][ T6302] loop9: detected capacity change from 0 to 512 [ 782.283538][ T6302] EXT4-fs (loop9): 1 orphan inode deleted [ 782.289439][ T6302] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 782.300984][ T6302] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.977231][ T30] audit: type=1326 audit(1759867454.145:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff560892710 code=0x7ffc0000 [ 783.061576][ T30] audit: type=1326 audit(1759867454.145:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff560892710 code=0x7ffc0000 [ 783.158275][ T30] audit: type=1326 audit(1759867454.145:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 783.287442][ T6310] loop9: detected capacity change from 0 to 256 [ 783.306100][ T30] audit: type=1326 audit(1759867454.145:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 783.329460][ T30] audit: type=1326 audit(1759867454.145:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 783.352790][ T30] audit: type=1326 audit(1759867454.145:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 783.376146][ T30] audit: type=1326 audit(1759867454.145:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6285 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 783.403403][ T6310] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 784.784537][ T6316] loop4: detected capacity change from 0 to 512 [ 787.292102][ T6316] EXT4-fs (loop4): 1 orphan inode deleted [ 787.297950][ T6316] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 787.309399][ T6316] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.558343][ T6327] loop9: detected capacity change from 0 to 512 [ 787.946313][ T6327] EXT4-fs (loop9): 1 orphan inode deleted [ 787.952158][ T6327] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 787.963670][ T6327] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.728241][ T944] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 788.743252][ T6335] loop4: detected capacity change from 0 to 4096 [ 788.752837][ T6335] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 788.772152][ T6335] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 788.818513][ T6335] EXT4-fs (loop4): Test dummy encryption mode enabled [ 788.825348][ T6335] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 788.825348][ T6335] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 788.825348][ T6335] [ 789.105562][ T6339] loop9: detected capacity change from 0 to 512 [ 789.118852][ T944] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.163234][ T944] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 789.398678][ T6339] EXT4-fs (loop9): 1 orphan inode deleted [ 789.404605][ T6339] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 789.416468][ T6339] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.682528][ T6343] loop7: detected capacity change from 0 to 512 [ 790.132136][ T6343] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1422: casefold flag without casefold feature [ 790.145058][ T6343] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1422: couldn't read orphan inode 15 (err -117) [ 790.158391][ T6343] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 790.187605][ T944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.196343][ T944] usb 9-1: config 0 descriptor?? [ 790.310630][ T944] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 791.940301][ T6352] loop9: detected capacity change from 0 to 512 [ 792.185727][ T3002] tipc: Left network mode [ 792.248539][ T6352] EXT4-fs (loop9): 1 orphan inode deleted [ 792.254348][ T6352] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 792.265742][ T6352] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.514091][ T944] usb 9-1: USB disconnect, device number 9 [ 793.595446][ T6362] loop4: detected capacity change from 0 to 512 [ 793.635674][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.670734][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.773509][ T6362] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 793.785826][ T30] audit: type=1326 audit(1759867467.905:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 793.876461][ T6348] device bridge_slave_0 entered promiscuous mode [ 793.931266][ T30] audit: type=1326 audit(1759867467.905:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 793.955213][ T30] audit: type=1326 audit(1759867467.905:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62ba544710 code=0x7ffc0000 [ 793.986340][ T30] audit: type=1326 audit(1759867467.905:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62ba544710 code=0x7ffc0000 [ 794.016021][ T30] audit: type=1326 audit(1759867467.905:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 794.041253][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.048608][ T6362] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1427: invalid indirect mapped block 4294967295 (level 1) [ 794.066998][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.068383][ T30] audit: type=1326 audit(1759867467.905:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.7.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 794.075070][ T6348] device bridge_slave_1 entered promiscuous mode [ 794.132481][ T6362] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1427: invalid indirect mapped block 4294967295 (level 1) [ 794.147911][ T6362] EXT4-fs (loop4): 2 truncates cleaned up [ 794.153798][ T6362] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 794.278056][ T6374] loop9: detected capacity change from 0 to 4096 [ 794.286540][ T6374] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 794.311004][ T6374] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 794.319267][ T6374] EXT4-fs (loop9): Test dummy encryption mode enabled [ 794.326217][ T6374] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 794.326217][ T6374] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 794.326217][ T6374] [ 794.529076][ T6376] loop8: detected capacity change from 0 to 4096 [ 794.558466][ T6376] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 794.595774][ T6376] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 797.658779][ T6383] loop7: detected capacity change from 0 to 512 [ 797.846970][ T6376] EXT4-fs (loop8): Test dummy encryption mode enabled [ 797.853958][ T6376] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 797.853958][ T6376] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 797.853958][ T6376] [ 797.979410][ T6383] EXT4-fs (loop7): 1 orphan inode deleted [ 797.985232][ T6383] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 797.996672][ T6383] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.589715][ T6395] loop9: detected capacity change from 0 to 512 [ 799.390348][ T6395] EXT4-fs (loop9): 1 orphan inode deleted [ 799.396171][ T6395] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 799.407518][ T6395] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.817158][ T6405] loop4: detected capacity change from 0 to 512 [ 799.924186][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 799.941216][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 800.169475][ T6405] EXT4-fs (loop4): 1 orphan inode deleted [ 800.175305][ T6405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 800.186765][ T6405] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.616203][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 800.633810][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 800.651385][ T2310] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.658497][ T2310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.682093][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 800.698642][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 800.715694][ T2310] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.722791][ T2310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.733251][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 800.741570][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 800.751095][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 800.759606][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 800.767655][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 800.776479][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 800.785334][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 800.800251][ T6348] device veth0_vlan entered promiscuous mode [ 800.880524][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 800.888695][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 800.896910][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 800.904873][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 800.919354][ T3002] device bridge_slave_1 left promiscuous mode [ 800.925945][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.933789][ T3002] device bridge_slave_0 left promiscuous mode [ 800.939992][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.947843][ T3002] device veth1_macvtap left promiscuous mode [ 800.954143][ T3002] device veth0_vlan left promiscuous mode [ 801.048695][ T6418] loop4: detected capacity change from 0 to 512 [ 801.088498][ T6172] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 801.242510][ T6418] EXT4-fs (loop4): 1 orphan inode deleted [ 801.248387][ T6418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 801.259892][ T6418] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.658966][ T6172] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 802.040444][ T6172] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 802.058890][ T6172] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.072773][ T6172] usb 9-1: config 0 descriptor?? [ 802.118936][ T6172] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 802.133734][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 802.142348][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 802.152122][ T6348] device veth1_macvtap entered promiscuous mode [ 802.232773][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 802.241515][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 802.252113][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 802.260460][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 802.585641][ T6433] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 802.595468][ T6433] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 803.730589][ T6437] loop7: detected capacity change from 0 to 512 [ 804.001250][ T6442] loop1: detected capacity change from 0 to 512 [ 804.018153][ T6437] EXT4-fs (loop7): 1 orphan inode deleted [ 804.024098][ T6437] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.035559][ T6437] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.220161][ T6442] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1443: casefold flag without casefold feature [ 804.233348][ T6442] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1443: couldn't read orphan inode 15 (err -117) [ 804.248078][ T6442] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 805.708658][ T30] audit: type=1400 audit(1759867479.905:385): avc: denied { remount } for pid=6441 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 805.757928][ T6448] loop9: detected capacity change from 0 to 512 [ 805.780595][ T5732] usb 9-1: USB disconnect, device number 10 [ 805.918281][ T6448] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1444: casefold flag without casefold feature [ 805.931117][ T6448] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1444: couldn't read orphan inode 15 (err -117) [ 806.096799][ T6448] EXT4-fs (loop9): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,,errors=continue. Quota mode: writeback. [ 806.140851][ T6458] overlayfs: missing 'lowerdir' [ 806.704038][ T30] audit: type=1400 audit(1759867480.895:386): avc: denied { read } for pid=6464 comm="syz.7.1449" path="socket:[31387]" dev="sockfs" ino=31387 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 806.923528][ T30] audit: type=1400 audit(1759867480.925:387): avc: denied { create } for pid=6466 comm="syz.4.1450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 807.647706][ T6491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1456'. [ 807.664131][ T30] audit: type=1400 audit(1759867481.225:388): avc: denied { setopt } for pid=6468 comm="syz.4.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 807.693844][ T6496] tmpfs: Unknown parameter 'usrquota' [ 807.742138][ T30] audit: type=1400 audit(1759867481.745:389): avc: denied { create } for pid=6472 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 807.761901][ T30] audit: type=1400 audit(1759867481.745:390): avc: denied { write } for pid=6472 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 807.860741][ T6505] kvm: pic: non byte read [ 807.865480][ T6505] kvm: pic: non byte read [ 807.870336][ T30] audit: type=1400 audit(1759867482.045:391): avc: denied { connect } for pid=6511 comm="syz.8.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 807.902977][ T6505] kvm: pic: non byte read [ 807.907592][ T6505] kvm: pic: single mode not supported [ 807.907607][ T6505] kvm: pic: level sensitive irq not supported [ 807.946358][ T6505] kvm: pic: non byte read [ 807.949889][ T30] audit: type=1400 audit(1759867482.145:392): avc: denied { name_bind } for pid=6513 comm="syz.8.1464" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 807.968609][ T6505] kvm: pic: non byte read [ 807.982708][ T6505] kvm: pic: non byte read [ 807.987400][ T6505] kvm: pic: non byte read [ 807.992410][ T6505] kvm: pic: non byte read [ 807.997046][ T6505] kvm: pic: single mode not supported [ 807.997106][ T6505] kvm: pic: non byte read [ 808.071325][ T30] audit: type=1326 audit(1759867482.265:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 808.078269][ T598] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 808.133780][ T30] audit: type=1326 audit(1759867482.265:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.1.1468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 808.478286][ T598] usb 5-1: Using ep0 maxpacket: 32 [ 808.618345][ T598] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 808.798303][ T598] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 808.814026][ T598] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 808.828298][ T598] usb 5-1: Product: syz [ 808.832547][ T598] usb 5-1: Manufacturer: syz [ 808.843218][ T598] usb 5-1: SerialNumber: syz [ 808.848305][ T5732] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 808.849236][ T598] usb 5-1: config 0 descriptor?? [ 808.878313][ T6507] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 808.991801][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1497'. [ 809.104560][ T6] usb 5-1: USB disconnect, device number 7 [ 810.185924][ T5732] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.196651][ T5732] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 810.205830][ T5732] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 810.222999][ T5732] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 810.232398][ T5732] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.281485][ T6542] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 810.318810][ T5732] hub 8-1:1.0: bad descriptor, ignoring hub [ 810.326735][ T5732] hub: probe of 8-1:1.0 failed with error -5 [ 810.338825][ T5732] cdc_wdm 8-1:1.0: skipping garbage [ 810.344098][ T5732] cdc_wdm 8-1:1.0: skipping garbage [ 810.359028][ T5732] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 810.378446][ T6638] process 'syz.8.1516' launched './file0' with NULL argv: empty string added [ 810.468897][ T6639] tmpfs: Unknown parameter 'grpquota' [ 810.482645][ T6644] binder: 6643:6644 ioctl c0306201 0 returned -14 [ 810.593752][ T6647] binder: 6646:6647 ioctl c0306201 200000000280 returned -14 [ 810.648633][ T5732] usb 8-1: USB disconnect, device number 7 [ 810.657147][ T6652] syz.8.1521[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.657249][ T6652] syz.8.1521[6652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 810.747670][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 810.747689][ T30] audit: type=1400 audit(1759867484.935:442): avc: denied { append } for pid=6659 comm="syz.8.1527" name="loop7" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 810.898789][ T30] audit: type=1326 audit(1759867484.985:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 810.927344][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1531'. [ 810.971710][ T30] audit: type=1326 audit(1759867484.985:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 810.998683][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1531'. [ 811.087057][ T30] audit: type=1326 audit(1759867484.985:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.151465][ T30] audit: type=1326 audit(1759867484.985:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.214185][ T30] audit: type=1326 audit(1759867484.985:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.237498][ T6683] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 811.266104][ T30] audit: type=1326 audit(1759867484.985:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.318667][ T30] audit: type=1326 audit(1759867484.985:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.393475][ T30] audit: type=1326 audit(1759867484.985:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.424802][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1543'. [ 811.434204][ T30] audit: type=1326 audit(1759867484.985:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.1.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x50000 [ 811.484614][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1543'. [ 811.895044][ T6709] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1547'. [ 811.977709][ T6720] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1549'. [ 812.083500][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'. [ 812.399973][ T7114] tipc: Enabled bearer , priority 0 [ 812.411324][ T7114] device syzkaller0 entered promiscuous mode [ 812.423291][ T7114] tipc: Resetting bearer [ 812.432602][ T7113] tipc: Resetting bearer [ 812.440142][ T7113] tipc: Disabling bearer [ 812.566172][ T7124] tipc: Enabled bearer , priority 0 [ 812.573590][ T7124] device syzkaller0 entered promiscuous mode [ 812.582107][ T7124] tipc: Resetting bearer [ 812.588336][ T5732] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 812.596405][ T7123] tipc: Resetting bearer [ 812.603992][ T7123] tipc: Disabling bearer [ 812.958308][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 813.018387][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 813.026124][ T5732] usb 2-1: can't read configurations, error -71 [ 813.048276][ T2531] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 813.096774][ T7104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.105878][ T7137] device veth0_to_team entered promiscuous mode [ 813.300171][ T7148] tipc: Started in network mode [ 813.344108][ T7148] tipc: Node identity 6, cluster identity 4711 [ 813.353715][ T7148] tipc: Node number set to 6 [ 813.359417][ T2531] usb 9-1: Using ep0 maxpacket: 16 [ 813.402102][ T7150] tipc: Enabled bearer , priority 0 [ 813.427333][ T7150] device syzkaller0 entered promiscuous mode [ 813.451270][ T7150] tipc: Resetting bearer [ 813.477562][ T7162] syz.1.1577 uses obsolete (PF_INET,SOCK_PACKET) [ 813.484059][ T2531] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.494389][ T7149] tipc: Resetting bearer [ 813.494902][ T2531] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 813.515067][ T7149] tipc: Disabling bearer [ 813.517563][ T2531] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 813.530107][ T2531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.538914][ T2531] usb 9-1: config 0 descriptor?? [ 813.831499][ T385] usb 9-1: USB disconnect, device number 11 [ 813.953976][ T7188] tmpfs: Unknown parameter 'usrquota' [ 814.005117][ T7191] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 814.231279][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 814.789244][ T7255] input: syz0 as /devices/virtual/input/input57 [ 814.874851][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1620'. [ 814.895568][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1620'. [ 815.157980][ T7288] 9pnet_virtio: no channels available for device syz [ 815.248742][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1637'. [ 816.052835][ T7353] tmpfs: Unknown parameter 'grpquota' [ 816.433864][ T7376] netlink: 51 bytes leftover after parsing attributes in process `syz.8.1667'. [ 816.515335][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 816.515353][ T30] audit: type=1400 audit(1759867490.705:517): avc: denied { create } for pid=7350 comm="syz.7.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 816.550462][ T30] audit: type=1400 audit(1759867490.735:518): avc: denied { bind } for pid=7350 comm="syz.7.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 816.664201][ T30] audit: type=1326 audit(1759867490.855:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.689262][ T30] audit: type=1326 audit(1759867490.855:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.712961][ T30] audit: type=1326 audit(1759867490.855:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.736597][ T30] audit: type=1326 audit(1759867490.855:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.765790][ T30] audit: type=1326 audit(1759867490.855:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.791813][ T30] audit: type=1326 audit(1759867490.855:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.883446][ T30] audit: type=1326 audit(1759867490.855:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 816.942742][ T30] audit: type=1326 audit(1759867490.855:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.4.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff560893ec9 code=0x7ffc0000 [ 817.001928][ T7426] tipc: Enabled bearer , priority 0 [ 817.009613][ T7426] device syzkaller0 entered promiscuous mode [ 817.018619][ T7426] tipc: Resetting bearer [ 817.025251][ T7425] tipc: Resetting bearer [ 817.032298][ T7425] tipc: Disabling bearer [ 817.290827][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1703'. [ 817.313862][ T7464] 9pnet_virtio: no channels available for device syz [ 817.656113][ T7496] fuse: root generation should be zero [ 818.534188][ T7535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=7535 comm=syz.9.1736 [ 819.069478][ T7557] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 819.198139][ T7566] binder: 7565:7566 ioctl c018620c 200000000240 returned -1 [ 819.402056][ T7573] tipc: Enabled bearer , priority 0 [ 819.417318][ T7577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=7577 comm=syz.4.1744 [ 819.444325][ T7573] device syzkaller0 entered promiscuous mode [ 819.455189][ T7573] tipc: Resetting bearer [ 819.470506][ T7572] tipc: Resetting bearer [ 819.479172][ T7572] tipc: Disabling bearer [ 820.168353][ T7612] 9pnet_virtio: no channels available for device syz [ 820.551149][ T7630] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1773'. [ 820.560599][ T7630] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1773'. [ 820.589377][ T7632] tipc: Started in network mode [ 820.597471][ T7632] tipc: Node identity 3acb0900be35, cluster identity 4711 [ 820.610727][ T7632] tipc: Enabled bearer , priority 0 [ 820.622018][ T7632] device syzkaller0 entered promiscuous mode [ 820.631551][ T7632] tipc: Resetting bearer [ 820.637886][ T7631] tipc: Resetting bearer [ 820.644626][ T7631] tipc: Disabling bearer [ 820.904534][ T7681] Disabled LAPIC found during irq injection [ 821.004860][ T7690] capability: warning: `syz.7.1799' uses 32-bit capabilities (legacy support in use) [ 821.398243][ T5732] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 821.628660][ T7779] binder_alloc: 7778: binder_alloc_buf size 61760 failed, no address space [ 821.637511][ T7779] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 821.638299][ T5732] usb 9-1: Using ep0 maxpacket: 8 [ 821.788288][ T5732] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.798627][ T5732] usb 9-1: config 0 has no interface number 0 [ 821.810263][ T5732] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 821.830643][ T5732] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 821.847138][ T5732] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.865204][ T5732] usb 9-1: config 0 descriptor?? [ 822.121416][ T5732] usb 9-1: USB disconnect, device number 12 [ 822.145435][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 822.145453][ T30] audit: type=1400 audit(1759867496.335:590): avc: denied { write } for pid=7791 comm="syz.7.1844" path="socket:[36938]" dev="sockfs" ino=36938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 822.236264][ T7794] binder: 7793:7794 ioctl c0306201 200000000280 returned -14 [ 822.604937][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 822.995907][ T30] audit: type=1400 audit(1759867496.915:591): avc: denied { create } for pid=7809 comm="syz.7.1851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 823.066284][ T7823] tipc: Enabled bearer , priority 0 [ 823.087884][ T7823] device syzkaller0 entered promiscuous mode [ 823.137708][ T7823] tipc: Resetting bearer [ 823.172465][ T7822] tipc: Resetting bearer [ 823.181952][ T7822] tipc: Disabling bearer [ 823.398256][ T5732] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 824.206636][ T5732] usb 5-1: Using ep0 maxpacket: 8 [ 824.216693][ T7847] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 824.269493][ T7851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1865'. [ 824.328340][ T5732] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 824.328378][ T5732] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 824.328401][ T5732] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 824.328426][ T5732] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 824.328450][ T5732] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.328485][ T5732] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 824.328509][ T5732] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.333196][ T30] audit: type=1400 audit(1759867498.525:592): avc: denied { bind } for pid=7855 comm="syz.8.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 824.731751][ T30] audit: type=1400 audit(1759867498.925:593): avc: denied { map } for pid=7872 comm="syz.7.1877" path="socket:[37157]" dev="sockfs" ino=37157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 824.731818][ T30] audit: type=1400 audit(1759867498.925:594): avc: denied { accept } for pid=7872 comm="syz.7.1877" path="socket:[37157]" dev="sockfs" ino=37157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 824.828233][ T5642] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 825.288351][ T5642] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 825.291517][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 825.303538][ T5642] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 825.320904][ T7886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1881'. [ 825.347041][ T5642] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 825.394394][ T5642] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 825.413859][ T5642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.448289][ T7864] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 825.468788][ T5642] hub 9-1:1.0: bad descriptor, ignoring hub [ 825.481019][ T5642] hub: probe of 9-1:1.0 failed with error -5 [ 825.488534][ T5642] cdc_wdm 9-1:1.0: skipping garbage [ 825.493841][ T5642] cdc_wdm 9-1:1.0: skipping garbage [ 825.501232][ T5642] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 825.566473][ T30] audit: type=1400 audit(1759867499.755:595): avc: denied { bind } for pid=7905 comm="syz.7.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 825.788678][ T598] usb 9-1: USB disconnect, device number 13 [ 826.000091][ T7921] tipc: Started in network mode [ 826.005075][ T7921] tipc: Node identity 7237210f3e5e, cluster identity 4711 [ 826.012830][ T7921] tipc: Enabled bearer , priority 0 [ 826.020319][ T7921] device syzkaller0 entered promiscuous mode [ 826.029227][ T7921] tipc: Resetting bearer [ 826.035701][ T7920] tipc: Resetting bearer [ 826.042849][ T7920] tipc: Disabling bearer [ 826.156765][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1897'. [ 826.216853][ T7940] tipc: Enabled bearer , priority 0 [ 826.224425][ T7940] device syzkaller0 entered promiscuous mode [ 826.233329][ T7940] tipc: Resetting bearer [ 826.248612][ T7939] tipc: Resetting bearer [ 826.258798][ T7939] tipc: Disabling bearer [ 826.309227][ T598] usb 5-1: USB disconnect, device number 8 [ 826.329229][ T30] audit: type=1400 audit(1759867500.525:596): avc: denied { ioctl } for pid=7947 comm="syz.8.1905" path="socket:[37424]" dev="sockfs" ino=37424 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 826.697290][ T7973] overlayfs: failed to resolve './file1': -2 [ 827.008555][ T7978] loop8: detected capacity change from 0 to 512 [ 827.828878][ T7980] loop1: detected capacity change from 0 to 512 [ 827.975515][ T7978] EXT4-fs (loop8): orphan cleanup on readonly fs [ 827.984620][ T7978] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 827.994999][ T7978] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 828.004461][ T7978] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.1913: Failed to acquire dquot type 1 [ 828.020881][ T7978] EXT4-fs (loop8): 1 truncate cleaned up [ 828.027045][ T7978] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 828.155313][ T7980] EXT4-fs (loop1): orphan cleanup on readonly fs [ 828.163917][ T7980] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 828.174283][ T7980] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 828.183709][ T7980] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.1916: Failed to acquire dquot type 1 [ 828.205616][ T7980] EXT4-fs (loop1): 1 truncate cleaned up [ 828.212834][ T7980] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 828.589276][ T7982] tipc: Enabled bearer , priority 0 [ 828.603471][ T7982] device syzkaller0 entered promiscuous mode [ 828.616527][ T7982] tipc: Resetting bearer [ 828.623230][ T7981] tipc: Resetting bearer [ 828.630538][ T7981] tipc: Disabling bearer [ 828.914183][ T7993] 9pnet: Insufficient options for proto=fd [ 828.929329][ T6] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 830.136968][ T8000] device syzkaller0 entered promiscuous mode [ 830.311019][ T8008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 830.320352][ T8008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 831.158256][ T30] audit: type=1326 audit(1759867505.275:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 831.255385][ T8017] overlayfs: failed to resolve './file1': -2 [ 831.331342][ T8014] loop8: detected capacity change from 0 to 4096 [ 831.356493][ T8014] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 831.359124][ T30] audit: type=1326 audit(1759867505.275:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 831.408297][ T6] usb 10-1: device descriptor read/all, error -71 [ 831.429452][ T8014] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 831.448435][ T8014] EXT4-fs (loop8): Test dummy encryption mode enabled [ 831.455876][ T30] audit: type=1326 audit(1759867505.275:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d83ba3710 code=0x7ffc0000 [ 831.471488][ T8014] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 831.471488][ T8014] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 831.471488][ T8014] [ 831.480540][ T30] audit: type=1326 audit(1759867505.275:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d83ba3710 code=0x7ffc0000 [ 831.527357][ T30] audit: type=1326 audit(1759867505.275:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 831.550923][ T30] audit: type=1326 audit(1759867505.275:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8010 comm="syz.1.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d83ba4ec9 code=0x7ffc0000 [ 832.895594][ T8030] loop4: detected capacity change from 0 to 512 [ 833.057546][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 833.057562][ T30] audit: type=1326 audit(1759867507.245:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc12ddec9 code=0x7ffc0000 [ 833.117330][ T30] audit: type=1326 audit(1759867507.285:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.9.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fabc12ddec9 code=0x7ffc0000 [ 833.169630][ T8030] EXT4-fs (loop4): 1 orphan inode deleted [ 833.175517][ T8030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 833.186628][ T8030] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.515381][ T8047] loop1: detected capacity change from 0 to 512 [ 834.585571][ T8047] EXT4-fs (loop1): 1 orphan inode deleted [ 834.591513][ T8047] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 834.603052][ T8047] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 835.467867][ T8060] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 835.476900][ T8060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 836.624393][ T30] audit: type=1326 audit(1759867510.585:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.7.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 836.666115][ T8067] loop8: detected capacity change from 0 to 256 [ 836.873516][ T30] audit: type=1326 audit(1759867510.585:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8059 comm="syz.7.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62ba545ec9 code=0x7ffc0000 [ 836.943925][ T8067] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 837.022193][ T8078] loop9: detected capacity change from 0 to 512 [ 837.035788][ T5732] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 837.149465][ T8081] loop4: detected capacity change from 0 to 512 [ 840.826602][ T8078] EXT4-fs warning (device loop9): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop9. [ 840.988705][ T8081] EXT4-fs (loop4): 1 orphan inode deleted [ 840.994559][ T8081] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 841.006071][ T8081] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.265376][ T8102] ================================================================== [ 841.273489][ T8102] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 841.281679][ T8102] Read of size 8 at addr ffff8881368e52c0 by task syz.1.1951/8102 [ 841.289615][ T8102] [ 841.291951][ T8102] CPU: 1 PID: 8102 Comm: syz.1.1951 Not tainted syzkaller #0 [ 841.299368][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 841.309550][ T8102] Call Trace: [ 841.312840][ T8102] [ 841.315775][ T8102] __dump_stack+0x21/0x30 [ 841.320113][ T8102] dump_stack_lvl+0xee/0x150 [ 841.324729][ T8102] ? show_regs_print_info+0x20/0x20 [ 841.329933][ T8102] ? load_image+0x3a0/0x3a0 [ 841.334449][ T8102] print_address_description+0x7f/0x2c0 [ 841.340002][ T8102] ? tc_setup_flow_action+0x870/0x3240 [ 841.345630][ T8102] kasan_report+0xf1/0x140 [ 841.350359][ T8102] ? tc_setup_flow_action+0x870/0x3240 [ 841.355847][ T8102] __asan_report_load8_noabort+0x14/0x20 [ 841.361487][ T8102] tc_setup_flow_action+0x870/0x3240 [ 841.366790][ T8102] mall_replace_hw_filter+0x293/0x820 [ 841.372177][ T8102] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 841.378256][ T8102] ? mall_set_parms+0x520/0x520 [ 841.383118][ T8102] ? tcf_exts_destroy+0xb0/0xb0 [ 841.387978][ T8102] ? mall_set_parms+0x1e8/0x520 [ 841.392832][ T8102] mall_change+0x526/0x740 [ 841.397271][ T8102] ? __kasan_check_write+0x14/0x20 [ 841.402592][ T8102] ? mall_get+0xa0/0xa0 [ 841.406758][ T8102] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 841.412652][ T8102] tc_new_tfilter+0x12a2/0x1870 [ 841.417522][ T8102] ? tcf_gate_entry_destructor+0x20/0x20 [ 841.423174][ T8102] ? security_capable+0x87/0xb0 [ 841.428040][ T8102] ? ns_capable+0x8c/0xf0 [ 841.432410][ T8102] ? netlink_net_capable+0x125/0x160 [ 841.437702][ T8102] ? tcf_gate_entry_destructor+0x20/0x20 [ 841.443367][ T8102] rtnetlink_rcv_msg+0x81b/0xb90 [ 841.448329][ T8102] ? rtnetlink_bind+0x80/0x80 [ 841.453015][ T8102] ? memcpy+0x56/0x70 [ 841.457003][ T8102] ? avc_has_perm_noaudit+0x2f4/0x460 [ 841.462375][ T8102] ? arch_stack_walk+0xee/0x140 [ 841.467232][ T8102] ? avc_denied+0x1b0/0x1b0 [ 841.471738][ T8102] ? stack_trace_save+0x98/0xe0 [ 841.476590][ T8102] ? avc_has_perm+0x158/0x240 [ 841.481313][ T8102] ? avc_has_perm_noaudit+0x460/0x460 [ 841.486687][ T8102] ? x64_sys_call+0x4b/0x9a0 [ 841.491279][ T8102] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 841.496672][ T8102] netlink_rcv_skb+0x1e0/0x430 [ 841.501439][ T8102] ? rtnetlink_bind+0x80/0x80 [ 841.506122][ T8102] ? netlink_ack+0xb60/0xb60 [ 841.510713][ T8102] ? __netlink_lookup+0x387/0x3b0 [ 841.515739][ T8102] rtnetlink_rcv+0x1c/0x20 [ 841.520163][ T8102] netlink_unicast+0x876/0xa40 [ 841.524939][ T8102] netlink_sendmsg+0x86a/0xb70 [ 841.529723][ T8102] ? netlink_getsockopt+0x530/0x530 [ 841.534941][ T8102] ? security_socket_sendmsg+0x82/0xa0 [ 841.540409][ T8102] ? netlink_getsockopt+0x530/0x530 [ 841.545615][ T8102] ____sys_sendmsg+0x5a2/0x8c0 [ 841.550390][ T8102] ? __sys_sendmsg_sock+0x40/0x40 [ 841.555424][ T8102] ? import_iovec+0x7c/0xb0 [ 841.559936][ T8102] ___sys_sendmsg+0x1f0/0x260 [ 841.564616][ T8102] ? __sys_sendmsg+0x250/0x250 [ 841.569387][ T8102] ? sock_show_fdinfo+0xa0/0xa0 [ 841.574246][ T8102] ? __fdget+0x1a1/0x230 [ 841.578501][ T8102] __x64_sys_sendmsg+0x1e2/0x2a0 [ 841.583442][ T8102] ? ___sys_sendmsg+0x260/0x260 [ 841.588294][ T8102] ? __kasan_check_write+0x14/0x20 [ 841.593407][ T8102] ? switch_fpu_return+0x15d/0x2c0 [ 841.598531][ T8102] x64_sys_call+0x4b/0x9a0 [ 841.602949][ T8102] do_syscall_64+0x4c/0xa0 [ 841.607367][ T8102] ? clear_bhb_loop+0x50/0xa0 [ 841.612043][ T8102] ? clear_bhb_loop+0x50/0xa0 [ 841.616720][ T8102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 841.622626][ T8102] RIP: 0033:0x7f4d83ba4ec9 [ 841.627043][ T8102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.646652][ T8102] RSP: 002b:00007f4d8260d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.655073][ T8102] RAX: ffffffffffffffda RBX: 00007f4d83dfbfa0 RCX: 00007f4d83ba4ec9 [ 841.663047][ T8102] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 841.671018][ T8102] RBP: 00007f4d83c27f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.678994][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.686991][ T8102] R13: 00007f4d83dfc038 R14: 00007f4d83dfbfa0 R15: 00007ffdc8f6fe78 [ 841.694975][ T8102] [ 841.697999][ T8102] [ 841.700327][ T8102] Allocated by task 8102: [ 841.704651][ T8102] __kasan_kmalloc+0xda/0x110 [ 841.709336][ T8102] __kmalloc+0x13d/0x2c0 [ 841.713583][ T8102] tcf_idr_create+0x5f/0x790 [ 841.718177][ T8102] tcf_idr_create_from_flags+0x61/0x70 [ 841.723645][ T8102] tcf_gact_init+0x346/0x580 [ 841.728253][ T8102] tcf_action_init_1+0x3f7/0x6a0 [ 841.733194][ T8102] tcf_action_init+0x1e9/0x710 [ 841.737967][ T8102] tcf_exts_validate+0x217/0x520 [ 841.742905][ T8102] mall_set_parms+0x48/0x520 [ 841.747511][ T8102] mall_change+0x45a/0x740 [ 841.751930][ T8102] tc_new_tfilter+0x12a2/0x1870 [ 841.756783][ T8102] rtnetlink_rcv_msg+0x81b/0xb90 [ 841.761727][ T8102] netlink_rcv_skb+0x1e0/0x430 [ 841.766492][ T8102] rtnetlink_rcv+0x1c/0x20 [ 841.770944][ T8102] netlink_unicast+0x876/0xa40 [ 841.775710][ T8102] netlink_sendmsg+0x86a/0xb70 [ 841.780473][ T8102] ____sys_sendmsg+0x5a2/0x8c0 [ 841.785238][ T8102] ___sys_sendmsg+0x1f0/0x260 [ 841.789930][ T8102] __x64_sys_sendmsg+0x1e2/0x2a0 [ 841.794875][ T8102] x64_sys_call+0x4b/0x9a0 [ 841.799293][ T8102] do_syscall_64+0x4c/0xa0 [ 841.803710][ T8102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 841.809603][ T8102] [ 841.811918][ T8102] Last potentially related work creation: [ 841.817629][ T8102] kasan_save_stack+0x3a/0x60 [ 841.822400][ T8102] __kasan_record_aux_stack+0xd2/0x100 [ 841.827854][ T8102] kasan_record_aux_stack_noalloc+0xb/0x10 [ 841.833655][ T8102] kvfree_call_rcu+0xae/0x7e0 [ 841.838331][ T8102] drop_sysctl_table+0x2ef/0x410 [ 841.843315][ T8102] unregister_sysctl_table+0x7a/0x120 [ 841.848683][ T8102] unregister_net_sysctl_table+0x15/0x20 [ 841.854313][ T8102] lowpan_frags_exit_net+0x60/0xb0 [ 841.859424][ T8102] cleanup_net+0x58b/0xad0 [ 841.863973][ T8102] process_one_work+0x6be/0xba0 [ 841.868936][ T8102] worker_thread+0xa59/0x1200 [ 841.873624][ T8102] kthread+0x411/0x500 [ 841.877699][ T8102] ret_from_fork+0x1f/0x30 [ 841.882151][ T8102] [ 841.884471][ T8102] The buggy address belongs to the object at ffff8881368e5200 [ 841.884471][ T8102] which belongs to the cache kmalloc-192 of size 192 [ 841.898524][ T8102] The buggy address is located 0 bytes to the right of [ 841.898524][ T8102] 192-byte region [ffff8881368e5200, ffff8881368e52c0) [ 841.912157][ T8102] The buggy address belongs to the page: [ 841.917784][ T8102] page:ffffea0004da3940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1368e5 [ 841.928035][ T8102] flags: 0x4000000000000200(slab|zone=1) [ 841.933678][ T8102] raw: 4000000000000200 0000000000000000 0000000400000001 ffff888100042c00 [ 841.942290][ T8102] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 841.950879][ T8102] page dumped because: kasan: bad access detected [ 841.957281][ T8102] page_owner tracks the page as allocated [ 841.962986][ T8102] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 733, ts 442782124120, free_ts 431257356634 [ 841.979041][ T8102] post_alloc_hook+0x192/0x1b0 [ 841.983813][ T8102] prep_new_page+0x1c/0x110 [ 841.988312][ T8102] get_page_from_freelist+0x2cc5/0x2d50 [ 841.993959][ T8102] __alloc_pages+0x18f/0x440 [ 841.998553][ T8102] new_slab+0xa1/0x4d0 [ 842.002620][ T8102] ___slab_alloc+0x381/0x810 [ 842.007206][ T8102] __slab_alloc+0x49/0x90 [ 842.011533][ T8102] kmem_cache_alloc_trace+0x146/0x270 [ 842.016904][ T8102] kernfs_fop_open+0x343/0xb30 [ 842.021674][ T8102] do_dentry_open+0x834/0x1010 [ 842.026449][ T8102] vfs_open+0x73/0x80 [ 842.030433][ T8102] path_openat+0x2646/0x2f10 [ 842.035024][ T8102] do_filp_open+0x1b3/0x3e0 [ 842.039523][ T8102] do_sys_openat2+0x14c/0x7b0 [ 842.044197][ T8102] __x64_sys_openat+0x136/0x160 [ 842.049050][ T8102] x64_sys_call+0x219/0x9a0 [ 842.053555][ T8102] page last free stack trace: [ 842.058219][ T8102] free_unref_page_prepare+0x542/0x550 [ 842.063703][ T8102] free_unref_page_list+0x134/0x9d0 [ 842.068900][ T8102] release_pages+0xfda/0x1030 [ 842.073579][ T8102] free_pages_and_swap_cache+0x86/0xa0 [ 842.079047][ T8102] tlb_finish_mmu+0x175/0x300 [ 842.083741][ T8102] exit_mmap+0x40f/0x860 [ 842.087995][ T8102] __mmput+0x93/0x320 [ 842.091980][ T8102] mmput+0x50/0x150 [ 842.095809][ T8102] do_exit+0x9d2/0x27a0 [ 842.099965][ T8102] do_group_exit+0x141/0x310 [ 842.104641][ T8102] get_signal+0x66a/0x1480 [ 842.109058][ T8102] arch_do_signal_or_restart+0xc1/0x10f0 [ 842.114692][ T8102] exit_to_user_mode_loop+0xa7/0xe0 [ 842.119890][ T8102] exit_to_user_mode_prepare+0x87/0xd0 [ 842.125355][ T8102] syscall_exit_to_user_mode+0x1a/0x30 [ 842.130812][ T8102] do_syscall_64+0x58/0xa0 [ 842.135230][ T8102] [ 842.137555][ T8102] Memory state around the buggy address: [ 842.143187][ T8102] ffff8881368e5180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 842.151342][ T8102] ffff8881368e5200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 842.159439][ T8102] >ffff8881368e5280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 842.167509][ T8102] ^ [ 842.173661][ T8102] ffff8881368e5300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 842.181719][ T8102] ffff8881368e5380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 842.189771][ T8102] ================================================================== [ 842.197821][ T8102] Disabling lock debugging due to kernel taint [ 842.218244][ T30] audit: type=1400 audit(1759867516.405:658): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 842.240532][ T30] audit: type=1400 audit(1759867516.405:659): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.262892][ T30] audit: type=1400 audit(1759867516.405:660): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.295181][ T30] audit: type=1400 audit(1759867516.405:661): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.317550][ T30] audit: type=1400 audit(1759867516.405:662): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.339207][ T30] audit: type=1400 audit(1759867516.405:663): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 842.362713][ T30] audit: type=1400 audit(1759867516.405:664): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1