last executing test programs: 18.535746872s ago: executing program 4 (id=73): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13.84049014s ago: executing program 4 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg(r0, 0x0, 0x44004) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000004000000000000000009505670000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20) sync() syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 11.309274726s ago: executing program 4 (id=95): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x10000, 0x0, &(0x7f0000000240)=0x3f774}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000002780)="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", 0x2c3}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10.885408653s ago: executing program 1 (id=97): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x7, 0x1000, 0x1}, 0x10, 0x13796, 0xffffffffffffffff, 0x5, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) capget(0x0, &(0x7f00000001c0)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 9.970948926s ago: executing program 1 (id=98): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x10000, 0x0, &(0x7f0000000240)=0x3f774}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) r4 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000080)=[{&(0x7f0000002780)="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", 0x2c3}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.659365315s ago: executing program 2 (id=102): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x13796, 0xffffffffffffffff, 0x5, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000081000000000000000000800000f8ff", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000008c000000050000000000000036acebf9b39c7b0701ed68e61a927d7824d3d06e49c2a036bb8b7544ed1bc13a4bf5b96516f6a87033819c0dce218ae5f685c02291a6d25d84c908e19ccafac7a97b0a88e228f23b27b151de05a64860b7132ae362baa63610fec29f0ed825ff218915d2015e97f52f36791f24f517ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 7.257328325s ago: executing program 2 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') sendmsg$NL80211_CMD_JOIN_OCB(r5, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) sendmsg(r1, &(0x7f0000000740)={&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010102}, 0x4, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="dce98898eb421e881c7d0b14868549d08b7339454fc7f56f81e88bf9115d853ce15389c78776e952136f2fa9d706015b8feffbe1cf5c354e189e1eada285a2567bbe7887b767b96d4ac8b2cf4cfefca06f72e052a863ceec4a56a9367f585e5722a440e4bcff68da37c0acbc1022951732b5b501871b49eb89123cccbb12b797f7cd440bdc55b743c45e7e2299d224a679dd7dfba790651e2d13e868b0bd7216dd2209ab", 0xa4}, {&(0x7f0000000580)="ba96b2a3e3d7bdbf14b5af543fe2b8edd1b56b8afee2f8767b5be2c157281fb40b96cfabc578f15081797673c60294145adbe2c6dd99f73ad264f33a3e4a9e279bb48105e2b5760070bcacb1d370a785b7f451b22966cd76feadba1941e175d52d4aecf82d5d4ddf5a2ebd2af5d17ff089f26f5a4cec6017089df370e28bf00c834c0e7942f36427fc081f82069a98640402894aa8d8fdea342aa99d4e004c61f3b12411a537f29e9f8c68a23a93e61a2cfa88f64e49090a1e429a09c723b3f5cbbe67733bd2292f0d5928e7163c692e1ee9adda4e6461fa2dc42bf38f28938f504d58dec28b00088775", 0xea}, {&(0x7f0000000680)="2345d2725450d5c1f18314d1e1a4679cf2aabca8ef288cb5416f8dda428e41a32fdc7682f95454614d53688a891d61ce63f525a0dafb055a4a3cdcb0101b4d3dbc98b1fe306fac8ebc655abe98ded8a45476450a6ea53a93ab6cbc00f247d6c0725f0e2583e30360a895dbc69862762c5006", 0x72}], 0x3}, 0x48000) unshare(0x62040200) 7.255082355s ago: executing program 4 (id=107): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a70700", 0x7}], 0x1, 0x7, 0x1) 6.801389152s ago: executing program 4 (id=109): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pselect6(0x0, 0x0, &(0x7f0000000100)={0x4, 0x100000001, 0x200, 0x9, 0x7, 0x7, 0x7ff, 0x1}, &(0x7f0000000140)={0x80000004, 0x0, 0x7, 0x100000000, 0x7f, 0xea2, 0xf39c, 0x9e8b}, 0x0, &(0x7f00000003c0)={0x0}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$vsock_stream(0x28, 0x1, 0x0) fsopen(0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r6, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) 6.784520992s ago: executing program 3 (id=110): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24}, @call={0x85, 0x0, 0x0, 0x53}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x7, 0x1000, 0x1}, 0x10, 0x13796, 0xffffffffffffffff, 0x6, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x0, 0x2, 0x2, 0x8}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000081000000000000000000800000f8ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) capget(0x0, &(0x7f00000001c0)) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 5.804587846s ago: executing program 2 (id=111): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x13796, 0xffffffffffffffff, 0x5, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000081000000000000000000800000f8ff", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) capget(0x0, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 5.803485566s ago: executing program 1 (id=112): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24}, @call={0x85, 0x0, 0x0, 0x53}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x7, 0x1000, 0x1}, 0x10, 0x13796, 0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) capget(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYBLOB="0000000000008c000000050000000000000036acebf9b39c7b0701ed68e61a927d7824d3d06e49c2a036bb8b7544ed1bc13a4bf5b96516f6a87033819c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 5.050568977s ago: executing program 3 (id=114): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r1) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 4.968799228s ago: executing program 1 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, 0x0, 0x0) 4.963712078s ago: executing program 2 (id=116): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.203442074s ago: executing program 1 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.318804067s ago: executing program 3 (id=119): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f0000000080)={'gre0\x00', @ifru_flags=0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) epoll_create1(0x0) io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0xaf7a, 0x40, 0x0, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) 1.789918174s ago: executing program 0 (id=120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d58", 0x19}], 0x1, 0x7, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x10}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x6000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.789071924s ago: executing program 3 (id=121): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80"], 0xf0}, 0x1, 0xe}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.788557034s ago: executing program 2 (id=122): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f0000000080)={'gre0\x00', @ifru_flags=0x100}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0xd, 0x5}]}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x4c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) epoll_create1(0x0) io_uring_setup(0x5ae4, &(0x7f0000005840)={0x0, 0xaf7a, 0x40, 0x0, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x5}, 0x48) 1.787964734s ago: executing program 1 (id=123): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.724191315s ago: executing program 0 (id=124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r6}, 0x10) readahead(r6, 0x6, 0x1) r7 = dup(r2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.673801956s ago: executing program 0 (id=125): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = dup(r1) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r10, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r10, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 1.461534639s ago: executing program 0 (id=126): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r1) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 1.228192683s ago: executing program 0 (id=127): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77e4, 0x0, 0x0, 0x0, 0xa000}, {}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24}, @call={0x85, 0x0, 0x0, 0x53}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x200}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x57, &(0x7f0000000800)=""/87, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0x7, 0x1000, 0x1}, 0x10, 0x13796, 0xffffffffffffffff, 0x6, &(0x7f0000000900), &(0x7f0000000940)=[{0x5, 0x1, 0xa, 0xb}, {0x1, 0x3, 0x9, 0x6}, {0x0, 0x2, 0x2, 0x8}, {0x1, 0x3, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x5}], 0x10, 0x208}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x6473d87a5dfcdb1c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000081000000000000000000800000f8ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) capget(0x0, &(0x7f00000001c0)) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 458.377844ms ago: executing program 4 (id=128): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000003140), r0) epoll_pwait2(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}], 0x3, &(0x7f0000000100), 0x0, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003180)=ANY=[@ANYBLOB="9f48060f", @ANYBLOB="01002abd7000fbdbdf25230000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000181200ff1c87615626f353d4ebbabe3db5cd36dd6176c82226e2073e8d5f1111105bd830f6f865160f54a9d3f0a03a41bcd6f371e1c38c1bf0677156e8a74fec42ed78cda48d4d3e48bd5485e43ffd6fb2b7c96464e9a42da15565ebf72d995347c40214e2dbee6e910615f9da11a5876d2e887da0fe6edf43e3f186c20fc8b3fc780ab4162a97a1ab8d5aac30437f2ce1e3", @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) close(0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000003280)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYRES32=r8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x143c3f2c7eb6cf74, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x102a, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0x8, "981a97", 0x1}) 388.592875ms ago: executing program 2 (id=129): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000200)={0x8, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x5, 0x4, 0x0, 0x2d, 0x14, 0xfffd, 0xfbfe, 0x0, 0x29, 0x0, @local, @remote}}}}) r1 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x28000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff08000006241a0000080905810300040000000904010000000000000904010102020d00000905820210000000000905030240"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000002000000002c0000002c00000002000000000000000402000d00000000090000000407ca7263a08f09dc00000000e4ffff0000000008000020040000170002"], &(0x7f00000005c0)=""/240, 0x46, 0xf0, 0x1}, 0x28) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 144.574228ms ago: executing program 3 (id=130): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0x0, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000000800006b21000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r1) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) read(r9, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 136.436198ms ago: executing program 0 (id=131): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$vsock_stream(0x28, 0x1, 0x0) fsopen(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r7, &(0x7f0000002ec0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000854) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) 0s ago: executing program 3 (id=132): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2b6081c, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$eJzs3M1rHGUYAPBnJtmkTaMbQfDjIEILFko3SXNpT40Xb4VCwWsNySSETLIhu6ndWLD1LNTmoiCIePboVSj1D/AmBQXvgmiNB/GyMptNatNsum3Srqa/H0z3eefjfd6nO7zsQN4J4Ln1ZvFPEjEcERcjotzen0bEQCs6EnF987yNe9emiy2JZvPSb0lxWWw0y9t9Je3PY9G6JF6NiDuliFMfPZy31lhbmMrzbKXdHq0vLo/WGmtD84tTc9lctjQ+cW7s7MTE2bGJR9bwSpe1nnj33NFb37+zvv7DN/Wbb/SfTmKyVXe0a+uym8ey+X9Siskd+5eeRrIeSno9AAAAulL8zu+LiP7Wr9Ry9LUiAAAA4DBpDjYBAACAQy+JPQ4e2esgAAAA8P+w9XcAW2t7n9Y62E5+fTsiRnbL399aQxxxJEoRMbSRPLAyIdm8DPbl+o2IuD258/77qrjDru+z77Ed7QfXSA/ss3cOwu1i/pncbf5Jt+ef2GX+6d96d8I+dZ7/7ufv6zD/Xewyx7dfvFbqmP9GxOv9u+VPtvMnHfK/12X+m+sf33rUObvl/3eurfdDnH74/RCTs/P5nq8fuPP3ybudjhX1D3XK3+q1c/3LXdRe+GDjj4VOc0mR/+Txvb//3fIX98Qn7XGkEXGr/Vm013fkOL7443d71T8T0XyS7//LLuv/+evBq12eCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC1pRAxHkla24zStVCKORcTLMZTm1Vr91Gx1dWmmOBYxEqV0dj7PxiKivNlOivZ4K77fPrOjPRERL/10dDPpfJ5Vpqv5TK+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNuxiBiOJK1ERBoRf5bTtFKJ6O/i2sFnMD4AAADggIz0egAAAADAU+f5HwAAAA6/J33+Tw54HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChdvHChWJrbty7Nl20Z640VheqV07PZLWFyuLqdGW6urJcmatW5/KsMl1dfFR/ebW6PH4uVq+O1rNafbTWWLu8WF1dql+eX5yayy5npWdSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI9ruLUlaSUi0lacppVKxAsRMRKlZHY+z8Yi4sWIuFsuDRbt8V4PGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgANXa6wtTOV5tiIQCJ5Z8GFE/AeGsUfQ65kJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBeqDXWFqbyPFup9XokAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fb6SxIRxfZW+cTwjoN9A8lf5SIYiIj3P7/06dWpen1lPGIg+X17f/2z9v4zPSkAAAAAngfnH+fkref0red4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbtUaawtTeZ6t7C84H421ZtLhnF7XCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJl/AgAA///CK8Nb") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. [ 20.548563][ T28] audit: type=1400 audit(1751917552.024:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.549758][ T275] cgroup: Unknown subsys name 'net' [ 20.572315][ T28] audit: type=1400 audit(1751917552.024:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.600780][ T28] audit: type=1400 audit(1751917552.054:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.600949][ T275] cgroup: Unknown subsys name 'devices' [ 20.712497][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.718236][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.819221][ T28] audit: type=1400 audit(1751917552.294:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.842392][ T28] audit: type=1400 audit(1751917552.294:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.865846][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.867357][ T28] audit: type=1400 audit(1751917552.294:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.898913][ T28] audit: type=1400 audit(1751917552.364:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.911517][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.924502][ T28] audit: type=1400 audit(1751917552.364:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.958635][ T28] audit: type=1400 audit(1751917552.394:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.984318][ T28] audit: type=1400 audit(1751917552.394:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.873173][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.880289][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.887632][ T283] device bridge_slave_0 entered promiscuous mode [ 22.902624][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.909767][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.917280][ T283] device bridge_slave_1 entered promiscuous mode [ 22.962000][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.969065][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.976521][ T286] device bridge_slave_0 entered promiscuous mode [ 22.983527][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.990675][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.997943][ T285] device bridge_slave_0 entered promiscuous mode [ 23.005755][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.012845][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.020113][ T285] device bridge_slave_1 entered promiscuous mode [ 23.033541][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.040650][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.048077][ T286] device bridge_slave_1 entered promiscuous mode [ 23.054664][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.061798][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.069094][ T284] device bridge_slave_0 entered promiscuous mode [ 23.079275][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.086351][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.093839][ T284] device bridge_slave_1 entered promiscuous mode [ 23.195424][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.202575][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.209956][ T287] device bridge_slave_0 entered promiscuous mode [ 23.218262][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.225406][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.232830][ T287] device bridge_slave_1 entered promiscuous mode [ 23.319191][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.326277][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.333726][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.340873][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.381571][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.388630][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.395926][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.402956][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.412145][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.419200][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.426537][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.433569][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.468062][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.475135][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.482412][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.489423][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.526571][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.533651][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.540936][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.547951][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.567775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.576202][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.583581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.591761][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.598951][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.606445][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.613715][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.621001][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.628327][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.635931][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.643263][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.650882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.658361][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.670581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.678816][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.685894][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.707450][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.715641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.723409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.731819][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.739455][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.746859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.755134][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.762175][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.769585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.777736][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.784758][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.792355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.800578][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807584][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.835028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.843194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.851612][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.858737][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.866229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.875208][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.882256][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.889710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.897994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.906024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.914543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.927793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.935430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.945028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.953357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.983933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.992019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.999930][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.008367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.017523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.025776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.033784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.042139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.050425][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.057445][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.064880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.073872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.082431][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.089445][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.097435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.105675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.113709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.121734][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.133338][ T284] device veth0_vlan entered promiscuous mode [ 24.141782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.149923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.158185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.166564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.186161][ T286] device veth0_vlan entered promiscuous mode [ 24.192465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.199981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.207671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.216412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.225040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.233059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.241214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.248669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.259104][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.267376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.279036][ T285] device veth0_vlan entered promiscuous mode [ 24.290771][ T284] device veth1_macvtap entered promiscuous mode [ 24.299524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.307796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.316026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.324481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.332922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.341221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.349059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.361388][ T283] device veth0_vlan entered promiscuous mode [ 24.368277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.375795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.383715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.391389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.398788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.407298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.415803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.424119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.436202][ T285] device veth1_macvtap entered promiscuous mode [ 24.445681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.453935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.462290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.470935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.479033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.493356][ T283] device veth1_macvtap entered promiscuous mode [ 24.500741][ T286] device veth1_macvtap entered promiscuous mode [ 24.511177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.519071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.527774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.536537][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.544948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.553264][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.574575][ T287] device veth0_vlan entered promiscuous mode [ 24.580885][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 24.591698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.600042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.608687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.617172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.625751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.633890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.642028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.650414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.658657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.666904][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.675321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.683720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.692201][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.699700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.721649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.730327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.739884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.764083][ T287] device veth1_macvtap entered promiscuous mode [ 24.816101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.832225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.840811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.849210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.245002][ T322] Zero length message leads to an empty skb [ 25.641930][ T327] loop2: detected capacity change from 0 to 512 [ 26.208980][ T327] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.452172][ T326] overlayfs: failed to resolve './file0': -2 [ 26.458382][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 26.458447][ T28] audit: type=1400 audit(1751917557.934:115): avc: denied { unlink } for pid=319 comm="syz.4.5" name="#1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 26.529668][ T327] EXT4-fs (loop2): 1 orphan inode deleted [ 26.535642][ T327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 26.547056][ T327] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.660957][ T333] 9pnet_fd: Insufficient options for proto=fd [ 26.927234][ T28] audit: type=1400 audit(1751917558.034:116): avc: denied { mount } for pid=309 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.968412][ T333] loop3: detected capacity change from 0 to 2048 [ 27.139830][ T313] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 27.155135][ T28] audit: type=1400 audit(1751917558.084:117): avc: denied { create } for pid=309 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.185850][ T28] audit: type=1400 audit(1751917558.644:118): avc: denied { name_bind } for pid=339 comm="syz.4.8" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.190577][ T313] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 27.822676][ T342] loop0: detected capacity change from 0 to 512 [ 28.061515][ T342] EXT4-fs (loop0): 1 orphan inode deleted [ 28.067376][ T342] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.078202][ T342] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.226948][ T28] audit: type=1400 audit(1751917558.644:119): avc: denied { node_bind } for pid=339 comm="syz.4.8" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.771333][ T28] audit: type=1400 audit(1751917560.144:120): avc: denied { setattr } for pid=339 comm="syz.4.8" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.861937][ T313] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 28.889740][ T313] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 28.930417][ T28] audit: type=1400 audit(1751917560.174:121): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 28.930783][ T285] EXT4-fs (loop2): unmounting filesystem. [ 28.957724][ T28] audit: type=1400 audit(1751917560.244:122): avc: denied { read } for pid=353 comm="syz.1.11" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.958308][ T286] EXT4-fs (loop0): unmounting filesystem. [ 29.055183][ T343] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 29.126449][ T361] loop4: detected capacity change from 0 to 512 [ 29.274821][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.391152][ T343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 29.443489][ T361] EXT4-fs (loop4): 1 orphan inode deleted [ 29.455386][ T343] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.469782][ T361] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.489886][ T343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.513082][ T343] usb 2-1: Product: syz [ 29.517328][ T343] usb 2-1: Manufacturer: syz [ 29.531216][ T361] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.540198][ T343] usb 2-1: SerialNumber: syz [ 29.550283][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 29.563646][ T354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.572292][ T305] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 29.771283][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.788186][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 29.816170][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.833639][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.850877][ T24] usb 1-1: Product: syz [ 29.859344][ T24] usb 1-1: Manufacturer: syz [ 29.909540][ T368] 9pnet_fd: Insufficient options for proto=fd [ 29.916427][ T24] usb 1-1: SerialNumber: syz [ 29.927235][ T358] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 29.961513][ T368] loop2: detected capacity change from 0 to 2048 [ 30.020585][ T369] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.721897][ T343] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 30.728372][ T343] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 30.929616][ T287] EXT4-fs (loop4): unmounting filesystem. [ 30.961870][ T343] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 31.036220][ T343] usb 2-1: USB disconnect, device number 2 [ 31.042474][ T343] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 31.088307][ T380] loop4: detected capacity change from 0 to 1024 [ 31.109022][ T380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.141361][ T380] EXT4-fs (loop4): unmounting filesystem. [ 31.181750][ T24] cdc_ncm 1-1:1.0: failed to get mac address [ 31.188651][ T24] cdc_ncm 1-1:1.0: bind() failure [ 31.231996][ T24] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 31.276677][ T24] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 31.375103][ T24] usb 1-1: USB disconnect, device number 2 [ 31.389786][ T388] loop4: detected capacity change from 0 to 1024 [ 31.400946][ T388] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.415112][ T388] EXT4-fs (loop4): unmounting filesystem. [ 31.910026][ T397] loop1: detected capacity change from 0 to 1024 [ 31.936883][ T397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 31.945927][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 31.945941][ T28] audit: type=1400 audit(1751917563.424:136): avc: denied { read } for pid=402 comm="syz.0.25" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.952033][ T397] EXT4-fs (loop1): unmounting filesystem. [ 31.983741][ T28] audit: type=1400 audit(1751917563.424:137): avc: denied { open } for pid=402 comm="syz.0.25" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.752336][ T28] audit: type=1400 audit(1751917564.234:138): avc: denied { read write } for pid=408 comm="syz.4.26" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.776454][ T28] audit: type=1400 audit(1751917564.234:139): avc: denied { open } for pid=408 comm="syz.4.26" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.838017][ T28] audit: type=1400 audit(1751917564.234:140): avc: denied { ioctl } for pid=408 comm="syz.4.26" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.878044][ T28] audit: type=1400 audit(1751917564.354:141): avc: denied { read write } for pid=413 comm="syz.2.28" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.904426][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 32.945268][ T305] Bluetooth: hci0: Frame reassembly failed (-84) [ 33.024462][ T28] audit: type=1400 audit(1751917564.354:142): avc: denied { open } for pid=413 comm="syz.2.28" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 33.048206][ T28] audit: type=1400 audit(1751917564.434:143): avc: denied { create } for pid=402 comm="syz.0.25" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.070254][ T305] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.071875][ T28] audit: type=1400 audit(1751917564.464:144): avc: denied { create } for pid=413 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.097439][ T28] audit: type=1400 audit(1751917564.494:145): avc: denied { read } for pid=413 comm="syz.2.28" path="socket:[16498]" dev="sockfs" ino=16498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 33.280244][ T304] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 33.310207][ T39] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.396098][ T426] loop0: detected capacity change from 0 to 512 [ 33.505362][ T39] usb 3-1: device descriptor read/64, error -71 [ 33.559861][ T426] EXT4-fs (loop0): 1 orphan inode deleted [ 33.565741][ T426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.577077][ T426] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.820233][ T39] usb 3-1: device descriptor read/64, error -71 [ 34.380197][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.414763][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 34.426784][ T286] EXT4-fs (loop0): unmounting filesystem. [ 34.521278][ T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 34.530231][ T39] usb 3-1: device descriptor read/64, error -71 [ 34.532343][ T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 34.728721][ T304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.738057][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.746160][ T304] usb 2-1: Product: syz [ 34.750413][ T304] usb 2-1: Manufacturer: syz [ 34.755088][ T304] usb 2-1: SerialNumber: syz [ 34.760641][ T418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 34.820245][ T39] usb 3-1: device descriptor read/64, error -71 [ 34.940435][ T39] usb usb3-port1: attempt power cycle [ 34.950290][ T421] Bluetooth: hci0: command 0x1003 tx timeout [ 34.950481][ T384] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.110236][ T415] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.110251][ T384] Bluetooth: hci1: command 0x1003 tx timeout [ 35.360241][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.391757][ T39] usb 3-1: device descriptor read/8, error -71 [ 35.712878][ T439] 9pnet: Could not find request transport: fd0x0000000000000003 [ 35.751402][ T39] usb 3-1: device descriptor read/8, error -71 [ 35.891017][ T304] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.897783][ T304] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 36.120885][ T449] loop4: detected capacity change from 0 to 512 [ 36.128835][ T343] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 36.147892][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.148866][ T304] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 36.850053][ T448] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 36.859065][ T448] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 36.871027][ T448] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 37.039620][ T449] EXT4-fs (loop4): 1 orphan inode deleted [ 37.045495][ T449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.985085][ T449] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.062071][ T343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.064538][ T304] usb 2-1: USB disconnect, device number 3 [ 38.080546][ T343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 38.082062][ T460] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 38.091829][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 38.091842][ T28] audit: type=1400 audit(1751917569.564:146): avc: denied { ioctl } for pid=459 comm="syz.1.39" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.108420][ T304] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 38.139477][ T343] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.149204][ T305] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.180745][ T305] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 38.273006][ T343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.462745][ T464] loop2: detected capacity change from 0 to 1024 [ 38.493395][ T39] usb 3-1: device not accepting address 5, error -71 [ 38.500438][ T39] usb usb3-port1: unable to enumerate USB device [ 38.507328][ T343] usb 4-1: Product: syz [ 38.511545][ T343] usb 4-1: Manufacturer: syz [ 38.516129][ T343] usb 4-1: SerialNumber: syz [ 38.605957][ T28] audit: type=1400 audit(1751917569.964:147): avc: denied { create } for pid=465 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.633529][ T28] audit: type=1400 audit(1751917569.964:148): avc: denied { connect } for pid=465 comm="syz.0.41" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.653793][ T441] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 38.918889][ T287] EXT4-fs (loop4): unmounting filesystem. [ 39.490153][ C0] sched: RT throttling activated [ 39.497680][ T28] audit: type=1400 audit(1751917569.964:149): avc: denied { write } for pid=465 comm="syz.0.41" laddr=fe80::a lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.527041][ T464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 39.687114][ T343] usb 4-1: can't set config #1, error -71 [ 39.716641][ T464] EXT4-fs (loop2): unmounting filesystem. [ 39.735325][ T343] usb 4-1: USB disconnect, device number 2 [ 41.267136][ T491] loop4: detected capacity change from 0 to 1024 [ 42.118591][ T498] 9pnet_fd: Insufficient options for proto=fd [ 42.131494][ T491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 42.146445][ T491] EXT4-fs (loop4): unmounting filesystem. [ 42.159943][ T498] loop2: detected capacity change from 0 to 2048 [ 43.184361][ T505] 9pnet_fd: Insufficient options for proto=fd [ 43.292814][ T505] loop3: detected capacity change from 0 to 2048 [ 43.644184][ T60] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 43.654270][ T369] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 43.700656][ T514] loop3: detected capacity change from 0 to 1024 [ 43.738709][ T514] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 43.749461][ T514] EXT4-fs (loop3): unmounting filesystem. [ 43.831291][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 43.846996][ T60] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 43.866634][ T60] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 43.893292][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.908061][ T60] usb 3-1: Product: syz [ 43.915944][ T60] usb 3-1: Manufacturer: syz [ 43.924616][ T60] usb 3-1: SerialNumber: syz [ 43.941078][ T503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 45.005424][ T60] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 45.015418][ T60] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 45.443077][ T60] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 45.456473][ T60] usb 3-1: USB disconnect, device number 6 [ 45.471837][ T60] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 45.562151][ T535] 9pnet_fd: Insufficient options for proto=fd [ 45.595134][ T535] loop3: detected capacity change from 0 to 2048 [ 45.656825][ T473] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 45.664831][ T537] loop1: detected capacity change from 0 to 1024 [ 45.686726][ T537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.706282][ T537] EXT4-fs (loop1): unmounting filesystem. [ 45.797092][ T542] loop1: detected capacity change from 0 to 1024 [ 45.821034][ T542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 45.832127][ T542] EXT4-fs (loop1): unmounting filesystem. [ 46.012950][ T19] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 48.053272][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 48.064835][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 48.101052][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 48.110085][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.118099][ T19] usb 4-1: Product: syz [ 48.122371][ T19] usb 4-1: Manufacturer: syz [ 48.127009][ T19] usb 4-1: SerialNumber: syz [ 49.300447][ T569] loop2: detected capacity change from 0 to 512 [ 49.309643][ T570] loop1: detected capacity change from 0 to 512 [ 49.496397][ T574] loop0: detected capacity change from 0 to 1024 [ 49.502892][ T19] usb 4-1: can't set config #1, error -71 [ 49.503365][ T570] EXT4-fs (loop1): 1 orphan inode deleted [ 49.509223][ T19] usb 4-1: USB disconnect, device number 3 [ 49.514489][ T570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 49.526799][ T305] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 49.529638][ T570] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.715941][ T569] EXT4-fs (loop2): 1 orphan inode deleted [ 49.721830][ T569] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.731999][ T569] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.032094][ T305] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 50.085199][ T574] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.264847][ T305] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 50.420574][ T305] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 50.434400][ T574] EXT4-fs (loop0): unmounting filesystem. [ 50.488188][ T285] EXT4-fs (loop2): unmounting filesystem. [ 50.722147][ T283] EXT4-fs (loop1): unmounting filesystem. [ 50.757416][ T304] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 50.783304][ T585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.72'. [ 50.787722][ T43] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.826047][ T589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 50.839388][ T344] Bluetooth: hci1: Frame reassembly failed (-84) [ 51.269239][ T304] usb 5-1: device descriptor read/all, error -71 [ 51.285174][ T595] loop3: detected capacity change from 0 to 2048 [ 51.682345][ T304] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 51.696213][ T602] loop1: detected capacity change from 0 to 1024 [ 51.707091][ T602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 51.716734][ T602] EXT4-fs (loop1): unmounting filesystem. [ 51.871437][ T304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 51.882536][ T304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 52.132164][ T304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.188615][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.202362][ T304] usb 5-1: Product: syz [ 52.206564][ T304] usb 5-1: Manufacturer: syz [ 52.211390][ T304] usb 5-1: SerialNumber: syz [ 52.211401][ T610] loop3: detected capacity change from 0 to 1024 [ 52.217529][ T596] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 52.234744][ T610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.244566][ T610] EXT4-fs (loop3): unmounting filesystem. [ 52.323845][ T613] loop3: detected capacity change from 0 to 2048 [ 52.332359][ T28] audit: type=1400 audit(1751917583.814:150): avc: denied { write } for pid=612 comm="syz.3.79" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.354172][ T28] audit: type=1400 audit(1751917583.814:151): avc: denied { add_name } for pid=612 comm="syz.3.79" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.376237][ T28] audit: type=1400 audit(1751917583.814:152): avc: denied { create } for pid=612 comm="syz.3.79" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 52.402624][ T28] audit: type=1400 audit(1751917583.814:153): avc: denied { associate } for pid=612 comm="syz.3.79" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.403758][ T615] loop3: detected capacity change from 0 to 1024 [ 52.441665][ T615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.451379][ T615] EXT4-fs (loop3): unmounting filesystem. [ 52.513130][ T618] loop3: detected capacity change from 0 to 2048 [ 52.541313][ T473] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.169855][ T415] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 53.176968][ T415] Bluetooth: hci1: command 0x1003 tx timeout [ 53.186951][ T421] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 54.375662][ T634] syz.1.85 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.403302][ T304] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 54.416349][ T304] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 54.603348][ T304] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 55.942996][ T304] usb 5-1: USB disconnect, device number 3 [ 55.949351][ T304] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 58.744140][ T679] loop2: detected capacity change from 0 to 512 [ 58.822991][ T679] EXT4-fs (loop2): 1 orphan inode deleted [ 58.828750][ T679] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.847441][ T344] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 58.880222][ T344] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 1 [ 58.940620][ T679] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.010235][ T323] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 59.060199][ T304] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 59.211888][ T323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.265798][ T323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 59.374416][ T323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.457655][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.526044][ T323] usb 1-1: Product: syz [ 59.570330][ T323] usb 1-1: Manufacturer: syz [ 59.610462][ T323] usb 1-1: SerialNumber: syz [ 59.726555][ T678] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 59.831010][ T304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 59.850419][ T304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 59.871623][ T304] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.890191][ T304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.900390][ T304] usb 5-1: Product: syz [ 59.904608][ T304] usb 5-1: Manufacturer: syz [ 59.909213][ T304] usb 5-1: SerialNumber: syz [ 59.931186][ T675] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.170199][ T583] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 60.351264][ T583] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 60.370182][ T583] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 60.392821][ T583] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 60.412211][ T583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.430184][ T583] usb 2-1: Product: syz [ 60.444622][ T583] usb 2-1: Manufacturer: syz [ 60.449465][ T583] usb 2-1: SerialNumber: syz [ 60.476120][ T688] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 60.485906][ T690] 9pnet_fd: Insufficient options for proto=fd [ 60.503473][ T690] loop3: detected capacity change from 0 to 2048 [ 60.976262][ T323] cdc_ncm 1-1:1.0: failed to get mac address [ 60.986565][ T323] cdc_ncm 1-1:1.0: bind() failure [ 61.054445][ T323] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 61.061419][ T323] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 61.069732][ T323] usb 1-1: USB disconnect, device number 3 [ 61.116136][ T285] EXT4-fs (loop2): unmounting filesystem. [ 61.174493][ T304] cdc_ncm 5-1:1.0: failed to get mac address [ 61.182820][ T304] cdc_ncm 5-1:1.0: bind() failure [ 61.189235][ T304] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 61.196866][ T304] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 61.231587][ T304] usb 5-1: USB disconnect, device number 4 [ 62.224012][ T583] cdc_ncm 2-1:1.0: failed to get mac address [ 62.372911][ T583] cdc_ncm 2-1:1.0: bind() failure [ 62.553646][ T583] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 62.602653][ T718] loop3: detected capacity change from 0 to 1024 [ 62.616267][ T583] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 62.624013][ T583] usb 2-1: USB disconnect, device number 4 [ 62.671851][ T718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.682016][ T718] EXT4-fs (loop3): unmounting filesystem. [ 64.389727][ T743] overlayfs: failed to resolve './file0': -2 [ 64.598597][ T746] loop4: detected capacity change from 0 to 512 [ 64.695634][ T746] EXT4-fs (loop4): 1 orphan inode deleted [ 64.702289][ T746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 64.713049][ T8] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.724592][ T8] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 64.737369][ T746] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.764280][ T751] loop3: detected capacity change from 0 to 1024 [ 64.820990][ T751] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 64.849227][ T751] EXT4-fs (loop3): unmounting filesystem. [ 67.525900][ T571] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 68.149533][ T786] loop0: detected capacity change from 0 to 1024 [ 68.191428][ T786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.241610][ T786] EXT4-fs (loop0): unmounting filesystem. [ 68.290190][ T323] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 68.350828][ T791] loop0: detected capacity change from 0 to 1024 [ 68.382251][ T791] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.433863][ T791] EXT4-fs (loop0): unmounting filesystem. [ 68.491249][ T323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.512856][ T323] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 68.560120][ T323] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.639937][ T323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.655814][ T323] usb 2-1: Product: syz [ 68.663919][ T323] usb 2-1: Manufacturer: syz [ 68.668532][ T323] usb 2-1: SerialNumber: syz [ 68.684707][ T782] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 69.347586][ T287] EXT4-fs (loop4): unmounting filesystem. [ 69.390575][ T313] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.673398][ T804] loop3: detected capacity change from 0 to 1024 [ 69.699179][ T804] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 69.709448][ T804] EXT4-fs (loop3): unmounting filesystem. [ 69.726551][ T583] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 69.734181][ T323] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 69.740690][ T323] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 69.805883][ T808] 9pnet: Could not find request transport: fd0x0000000000000003 [ 69.887315][ T810] loop0: detected capacity change from 0 to 512 [ 69.922055][ T583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.944438][ T808] loop3: detected capacity change from 0 to 2048 [ 69.951000][ T583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 70.005946][ T323] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 70.124585][ T810] EXT4-fs (loop0): 1 orphan inode deleted [ 70.130503][ T810] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 70.141622][ T810] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.329039][ T28] audit: type=1400 audit(1751917601.804:154): avc: denied { read } for pid=142 comm="dhcpcd" name="n19" dev="tmpfs" ino=1694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 70.369515][ T583] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.383025][ T323] usb 2-1: USB disconnect, device number 5 [ 70.873315][ T323] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 70.882753][ T583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.891116][ T583] usb 3-1: Product: syz [ 70.946276][ T583] usb 3-1: Manufacturer: syz [ 70.965081][ T583] usb 3-1: SerialNumber: syz [ 70.973240][ T28] audit: type=1400 audit(1751917601.834:155): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=1694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.002585][ T571] ================================================================== [ 71.010674][ T571] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 71.018560][ T571] Read of size 8 at addr ffff88811a25ccf0 by task kworker/1:6/571 [ 71.026393][ T571] [ 71.028727][ T571] CPU: 1 PID: 571 Comm: kworker/1:6 Not tainted 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 71.038531][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.048579][ T571] Workqueue: inet_frag_wq fqdir_work_fn [ 71.054150][ T571] Call Trace: [ 71.057432][ T571] [ 71.060357][ T571] __dump_stack+0x21/0x24 [ 71.064695][ T571] dump_stack_lvl+0xee/0x150 [ 71.069280][ T571] ? __cfi_dump_stack_lvl+0x8/0x8 [ 71.074285][ T571] ? _raw_spin_lock_irq+0x8f/0xe0 [ 71.079296][ T571] ? __list_del_entry_valid+0xa6/0x130 [ 71.084731][ T571] print_address_description+0x71/0x210 [ 71.090271][ T571] print_report+0x4a/0x60 [ 71.094597][ T571] kasan_report+0x122/0x150 [ 71.099115][ T571] ? __list_del_entry_valid+0xa6/0x130 [ 71.104549][ T571] __asan_report_load8_noabort+0x14/0x20 [ 71.110159][ T571] __list_del_entry_valid+0xa6/0x130 [ 71.115417][ T571] process_one_work+0x4b9/0xc40 [ 71.120246][ T571] worker_thread+0xa29/0x11f0 [ 71.124908][ T571] kthread+0x281/0x320 [ 71.128952][ T571] ? __cfi_worker_thread+0x10/0x10 [ 71.134038][ T571] ? __cfi_kthread+0x10/0x10 [ 71.138623][ T571] ret_from_fork+0x1f/0x30 [ 71.143024][ T571] [ 71.146052][ T571] [ 71.148360][ T571] Allocated by task 323: [ 71.152574][ T571] kasan_set_track+0x4b/0x70 [ 71.157138][ T571] kasan_save_alloc_info+0x25/0x30 [ 71.162223][ T571] __kasan_kmalloc+0x95/0xb0 [ 71.166786][ T571] __kmalloc_node+0xb2/0x1e0 [ 71.171352][ T571] kvmalloc_node+0x294/0x480 [ 71.175917][ T571] alloc_netdev_mqs+0x8d/0xf90 [ 71.180671][ T571] alloc_etherdev_mqs+0x37/0x40 [ 71.185500][ T571] usbnet_probe+0x20c/0x2780 [ 71.190070][ T571] usb_probe_interface+0x610/0xaf0 [ 71.195593][ T571] really_probe+0x2cb/0x960 [ 71.200075][ T571] __driver_probe_device+0x198/0x280 [ 71.205336][ T571] driver_probe_device+0x54/0x3e0 [ 71.210336][ T571] __device_attach_driver+0x2e9/0x4a0 [ 71.215683][ T571] bus_for_each_drv+0x183/0x210 [ 71.220509][ T571] __device_attach+0x2a2/0x400 [ 71.225249][ T571] device_initial_probe+0x1a/0x20 [ 71.230265][ T571] bus_probe_device+0xc0/0x1f0 [ 71.235001][ T571] device_add+0xb4d/0xef0 [ 71.239303][ T571] usb_set_configuration+0x19c2/0x1f10 [ 71.244749][ T571] usb_generic_driver_probe+0x91/0x150 [ 71.250193][ T571] usb_probe_device+0x159/0x270 [ 71.255026][ T571] really_probe+0x2cb/0x960 [ 71.259508][ T571] __driver_probe_device+0x198/0x280 [ 71.264767][ T571] driver_probe_device+0x54/0x3e0 [ 71.269766][ T571] __device_attach_driver+0x2e9/0x4a0 [ 71.275199][ T571] bus_for_each_drv+0x183/0x210 [ 71.280018][ T571] __device_attach+0x2a2/0x400 [ 71.284753][ T571] device_initial_probe+0x1a/0x20 [ 71.289770][ T571] bus_probe_device+0xc0/0x1f0 [ 71.294531][ T571] device_add+0xb4d/0xef0 [ 71.298890][ T571] usb_new_device+0xa70/0x1520 [ 71.303635][ T571] hub_event+0x2a5d/0x4680 [ 71.308029][ T571] process_one_work+0x71f/0xc40 [ 71.312851][ T571] worker_thread+0xa29/0x11f0 [ 71.317499][ T571] kthread+0x281/0x320 [ 71.321568][ T571] ret_from_fork+0x1f/0x30 [ 71.325958][ T571] [ 71.328342][ T571] Freed by task 323: [ 71.332301][ T571] kasan_set_track+0x4b/0x70 [ 71.336868][ T571] kasan_save_free_info+0x31/0x50 [ 71.341885][ T571] ____kasan_slab_free+0x132/0x180 [ 71.346979][ T571] __kasan_slab_free+0x11/0x20 [ 71.351714][ T571] slab_free_freelist_hook+0xc2/0x190 [ 71.357063][ T571] __kmem_cache_free+0xb7/0x1b0 [ 71.361885][ T571] kfree+0x6f/0xf0 [ 71.365583][ T571] kvfree+0x35/0x40 [ 71.369367][ T571] netdev_freemem+0x3f/0x60 [ 71.373843][ T571] netdev_release+0x7f/0xb0 [ 71.378323][ T571] device_release+0xa4/0x1d0 [ 71.382885][ T571] kobject_put+0x19d/0x280 [ 71.387274][ T571] put_device+0x1f/0x30 [ 71.391403][ T571] free_netdev+0x392/0x490 [ 71.395795][ T571] usbnet_disconnect+0x25a/0x3b0 [ 71.400725][ T571] usb_unbind_interface+0x223/0x8d0 [ 71.405899][ T571] device_release_driver_internal+0x508/0x820 [ 71.411941][ T571] device_release_driver+0x19/0x20 [ 71.417025][ T571] bus_remove_device+0x2ee/0x350 [ 71.421964][ T571] device_del+0x6a4/0xeb0 [ 71.426392][ T571] usb_disable_device+0x3a8/0x750 [ 71.433636][ T571] usb_disconnect+0x31e/0x860 [ 71.438580][ T571] hub_event+0x1bd5/0x4680 [ 71.443015][ T571] process_one_work+0x71f/0xc40 [ 71.447909][ T571] worker_thread+0xd2e/0x11f0 [ 71.452570][ T571] kthread+0x281/0x320 [ 71.456615][ T571] ret_from_fork+0x1f/0x30 [ 71.461007][ T571] [ 71.463317][ T571] Last potentially related work creation: [ 71.469013][ T571] kasan_save_stack+0x3a/0x60 [ 71.473675][ T571] __kasan_record_aux_stack+0xb6/0xc0 [ 71.479026][ T571] kasan_record_aux_stack_noalloc+0xb/0x10 [ 71.484809][ T571] insert_work+0x51/0x300 [ 71.489117][ T571] __queue_work+0x9b1/0xd30 [ 71.493629][ T571] queue_work_on+0xd2/0x140 [ 71.498124][ T571] usbnet_link_change+0x176/0x1a0 [ 71.503148][ T571] usbnet_probe+0x1d55/0x2780 [ 71.507828][ T571] usb_probe_interface+0x610/0xaf0 [ 71.512928][ T571] really_probe+0x2cb/0x960 [ 71.517417][ T571] __driver_probe_device+0x198/0x280 [ 71.522679][ T571] driver_probe_device+0x54/0x3e0 [ 71.527678][ T571] __device_attach_driver+0x2e9/0x4a0 [ 71.533117][ T571] bus_for_each_drv+0x183/0x210 [ 71.537996][ T571] __device_attach+0x2a2/0x400 [ 71.542738][ T571] device_initial_probe+0x1a/0x20 [ 71.547738][ T571] bus_probe_device+0xc0/0x1f0 [ 71.552475][ T571] device_add+0xb4d/0xef0 [ 71.556800][ T571] usb_set_configuration+0x19c2/0x1f10 [ 71.562259][ T571] usb_generic_driver_probe+0x91/0x150 [ 71.567719][ T571] usb_probe_device+0x159/0x270 [ 71.572579][ T571] really_probe+0x2cb/0x960 [ 71.577148][ T571] __driver_probe_device+0x198/0x280 [ 71.582415][ T571] driver_probe_device+0x54/0x3e0 [ 71.587418][ T571] __device_attach_driver+0x2e9/0x4a0 [ 71.592766][ T571] bus_for_each_drv+0x183/0x210 [ 71.597589][ T571] __device_attach+0x2a2/0x400 [ 71.602327][ T571] device_initial_probe+0x1a/0x20 [ 71.607329][ T571] bus_probe_device+0xc0/0x1f0 [ 71.612066][ T571] device_add+0xb4d/0xef0 [ 71.616379][ T571] usb_new_device+0xa70/0x1520 [ 71.621126][ T571] hub_event+0x2a5d/0x4680 [ 71.625540][ T571] process_one_work+0x71f/0xc40 [ 71.630373][ T571] worker_thread+0xa29/0x11f0 [ 71.635125][ T571] kthread+0x281/0x320 [ 71.639179][ T571] ret_from_fork+0x1f/0x30 [ 71.643574][ T571] [ 71.645871][ T571] The buggy address belongs to the object at ffff88811a25c000 [ 71.645871][ T571] which belongs to the cache kmalloc-4k of size 4096 [ 71.659898][ T571] The buggy address is located 3312 bytes inside of [ 71.659898][ T571] 4096-byte region [ffff88811a25c000, ffff88811a25d000) [ 71.673777][ T571] [ 71.676093][ T571] The buggy address belongs to the physical page: [ 71.682473][ T571] page:ffffea0004689600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11a258 [ 71.692696][ T571] head:ffffea0004689600 order:3 compound_mapcount:0 compound_pincount:0 [ 71.700994][ T571] flags: 0x4000000000010200(slab|head|zone=1) [ 71.707050][ T571] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 71.715614][ T571] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 71.724172][ T571] page dumped because: kasan: bad access detected [ 71.730556][ T571] page_owner tracks the page as allocated [ 71.736273][ T571] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 323, tgid 323 (kworker/1:3), ts 68692377108, free_ts 68571098337 [ 71.758832][ T571] post_alloc_hook+0x1f5/0x210 [ 71.763586][ T571] prep_new_page+0x1c/0x110 [ 71.768076][ T571] get_page_from_freelist+0x2c7b/0x2cf0 [ 71.773626][ T571] __alloc_pages+0x19e/0x3a0 [ 71.778199][ T571] alloc_slab_page+0x6e/0xf0 [ 71.782774][ T571] new_slab+0x98/0x3d0 [ 71.786848][ T571] ___slab_alloc+0x6f6/0xb50 [ 71.791432][ T571] __slab_alloc+0x5e/0xa0 [ 71.795738][ T571] __kmem_cache_alloc_node+0x203/0x2c0 [ 71.801167][ T571] kmalloc_trace+0x29/0xb0 [ 71.805560][ T571] kobject_uevent_env+0x287/0x730 [ 71.810559][ T571] kobject_uevent+0x1d/0x30 [ 71.815056][ T571] device_add+0xa5c/0xef0 [ 71.819364][ T571] usb_set_configuration+0x19c2/0x1f10 [ 71.824809][ T571] usb_generic_driver_probe+0x91/0x150 [ 71.830254][ T571] usb_probe_device+0x159/0x270 [ 71.835122][ T571] page last free stack trace: [ 71.839766][ T571] free_unref_page_prepare+0x742/0x750 [ 71.845225][ T571] free_unref_page+0x8f/0x530 [ 71.849875][ T571] __free_pages+0x67/0x100 [ 71.854282][ T571] __free_slab+0xca/0x1a0 [ 71.858584][ T571] __unfreeze_partials+0x160/0x190 [ 71.863667][ T571] put_cpu_partial+0xa9/0x100 [ 71.868334][ T571] __slab_free+0x1c4/0x280 [ 71.872723][ T571] ___cache_free+0xbf/0xd0 [ 71.877112][ T571] qlist_free_all+0xc6/0x140 [ 71.881676][ T571] kasan_quarantine_reduce+0x14a/0x170 [ 71.887121][ T571] __kasan_slab_alloc+0x24/0x80 [ 71.891948][ T571] slab_post_alloc_hook+0x4f/0x2d0 [ 71.897037][ T571] kmem_cache_alloc+0x16e/0x330 [ 71.901861][ T571] getname_flags+0xb9/0x500 [ 71.906340][ T571] user_path_at_empty+0x30/0x1c0 [ 71.911294][ T571] do_readlinkat+0xd4/0x480 [ 71.915777][ T571] [ 71.918074][ T571] Memory state around the buggy address: [ 71.923676][ T571] ffff88811a25cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.931712][ T571] ffff88811a25cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.939747][ T571] >ffff88811a25cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.947783][ T571] ^ [ 71.955466][ T571] ffff88811a25cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.963499][ T571] ffff88811a25cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.971528][ T571] ================================================================== [ 71.979560][ T571] Disabling lock debugging due to kernel taint [ 71.985973][ T421] Bluetooth: hci0: command 0x1003 tx timeout [ 71.986562][ T801] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 71.992678][ T384] Bluetooth: hci0: Opcode 0x1003 failed: -110 SYZFAIL: failed to send rpc fd=3 want=76880 sent=0 n=-1 (errno 32: Broken pipe) [ 72.017815][ T28] audit: type=1400 audit(1751917601.834:156): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n19" dev="tmpfs" ino=1694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.040897][ T344] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.040937][ T344] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 1 [ 72.072656][ T286] EXT4-fs (loop0): unmounting filesystem. [ 72.086922][ T28] audit: type=1400 audit(1751917603.494:157): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[14669]" dev="pipefs" ino=14669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 72.120184][ T28] audit: type=1400 audit(1751917603.554:158): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 72.224492][ T28] audit: type=1400 audit(1751917603.554:159): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.291036][ T28] audit: type=1400 audit(1751917603.554:160): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.315855][ T28] audit: type=1400 audit(1751917603.554:161): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 72.344858][ T28] audit: type=1400 audit(1751917603.554:162): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 72.383491][ T583] cdc_ncm 3-1:1.0: bind() failure [ 72.388130][ T285] syz-executor (285) used greatest stack depth: 20928 bytes left [ 72.403801][ T583] usb 3-1: USB disconnect, device number 8 [ 72.850717][ T305] device bridge_slave_1 left promiscuous mode [ 72.856917][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.864458][ T305] device bridge_slave_0 left promiscuous mode [ 72.870638][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.878338][ T305] device veth1_macvtap left promiscuous mode [ 72.884617][ T305] device veth0_vlan left promiscuous mode [ 73.631199][ T305] device bridge_slave_1 left promiscuous mode [ 73.637324][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.644786][ T305] device bridge_slave_0 left promiscuous mode [ 73.651044][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.658639][ T305] device bridge_slave_1 left promiscuous mode [ 73.664816][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.672230][ T305] device bridge_slave_0 left promiscuous mode [ 73.678320][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.686047][ T305] device bridge_slave_1 left promiscuous mode [ 73.692221][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.699527][ T305] device bridge_slave_0 left promiscuous mode [ 73.705793][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.713512][ T305] device bridge_slave_1 left promiscuous mode [ 73.719599][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.727020][ T305] device bridge_slave_0 left promiscuous mode [ 73.733275][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.741396][ T305] device veth1_macvtap left promiscuous mode [ 73.747394][ T305] device veth0_vlan left promiscuous mode [ 73.753468][ T305] device veth1_macvtap left promiscuous mode [ 73.759465][ T305] device veth0_vlan left promiscuous mode [ 73.765457][ T305] device veth1_macvtap left promiscuous mode [ 73.771488][ T305] device veth0_vlan left promiscuous mode [ 73.777337][ T305] device veth1_macvtap left promiscuous mode [ 73.783494][ T305] device veth0_vlan left promiscuous mode