last executing test programs: 37m43.975687165s ago: executing program 3 (id=409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 37m42.157114312s ago: executing program 3 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[]) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000100)={0x0, 0x2, [@remote, @broadcast]}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) syz_clone3(&(0x7f0000000380)={0x40800000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 37m41.029243959s ago: executing program 3 (id=417): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) epoll_create1(0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0xb}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) 37m38.074514633s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) pwritev2(r5, &(0x7f0000000380), 0x0, 0x528, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) kcmp(r6, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 37m36.313511889s ago: executing program 3 (id=423): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x16, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000007c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@nobarrier}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x3}}, {@minixdf}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") syz_open_dev$tty20(0xc, 0x4, 0x1) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 37m36.181736811s ago: executing program 3 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r1 = getpid() munmap(&(0x7f00000ce000/0x1000)=nil, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8918, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x2000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000020000d"], 0x84}}, 0x0) 37m35.59350893s ago: executing program 32 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r1 = getpid() munmap(&(0x7f00000ce000/0x1000)=nil, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8918, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, 0x0, 0x2000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000020000d"], 0x84}}, 0x0) 32m43.319295605s ago: executing program 2 (id=1098): r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_socket_connect_nvme_tcp() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 32m41.66193701s ago: executing program 2 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r7, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000000780)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r1) 32m37.307850935s ago: executing program 2 (id=1107): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x50b, &(0x7f0000000200)="$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") r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x8000000000000013) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x830) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r5, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) 32m36.220564721s ago: executing program 2 (id=1108): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000400)={{0x0, 0xffffffffffffffff, 0x6, 0x3, 0x32, 0x800, 0x401, 0x0, 0x5, 0x2, 0x6, 0xeae7, 0xbaa, 0x5, 0x3}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000001400)={{r5, 0x222, 0x7, 0xf42c, 0x6, 0x6, 0x8, 0x6, 0x4, 0x2, 0x101, 0x8000000000000001, 0x6, 0xa, 0x469a}, 0x8, [0x0]}) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0x8c03, &(0x7f00000004c0)=ANY=[@ANYBLOB='rootco']) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x48, &(0x7f00000006c0)=0x4a3d, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0xc0) write$cgroup_pressure(r7, &(0x7f0000000500)={'some', 0x20, 0x65, 0x20, 0xe}, 0x17) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) 32m34.361202789s ago: executing program 2 (id=1115): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) getegid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) 32m33.064987958s ago: executing program 2 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 32m18.119824291s ago: executing program 33 (id=1118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$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") r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r7, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 30m33.968528373s ago: executing program 6 (id=1342): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42200, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pause() ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="18001000040900009c0000000700000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018450000080000000000000000000000186000000600000000000000ff0700009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x18, &(0x7f00000000c0)=""/24, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x6, 0xfffff906}, 0x10, 0xace2, 0xffffffffffffffff, 0x6, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x5, 0xe}, {0x3, 0x1, 0x7, 0x2}, {0x4, 0x4, 0x0, 0x7}, {0x0, 0x4, 0xd}, {0x4, 0x4, 0xc, 0xf224a0dff18ded0b}, {0x4, 0x2, 0x8, 0xb}], 0x10, 0x10001}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000540)={0xc, 0x10, '\x00', 0x0, &(0x7f0000000500)=[0x0, 0x0]}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000340)=@generic={&(0x7f0000001080)='./file0/../file0/file0\x00', r6}, 0x18) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xfffffc00, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") socket$packet(0x11, 0x3, 0x300) 30m29.073533796s ago: executing program 6 (id=1350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open(&(0x7f0000000100)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r3, &(0x7f0000000b40)=""/4096, 0x1000) write$UHID_CREATE(r3, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/1, 0x1, 0x3, 0x0, 0x0, 0x0, 0xc08}}, 0x120) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448f0, &(0x7f0000000080)) fdatasync(r4) ftruncate(r4, 0x81ff) 30m22.77150584s ago: executing program 6 (id=1357): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200), &(0x7f00000004c0), 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x8001}}, {@fmask={'fmask', 0x3d, 0x4b280000}}, {@dmask={'dmask', 0x3d, 0x6a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@dmask={'dmask', 0x3d, 0x7fd}}, {@allow_utime={'allow_utime', 0x3d, 0xe61}}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) write(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) unshare(0x64000600) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1, 0x1}, 0x20) 30m14.591815713s ago: executing program 6 (id=1372): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461fb6c3d302c636865636b3d7374726958571d744ce34ff0352c73686f72746e616d653d77696e3948b3636f6465706167653d3934392c726f6469722c616cc4d69ace3d959de5c5d73b52cb86f97b6c6f775f7574696d653d303030303030301a3030303030303030303137373737372c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c696f636861727365743d63703934392c6e6f6e750000000019b604532c"], 0x25, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) stat(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000280), &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x800, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@version_u}, {@access_client}, {@cache_mmap}, {@mmap}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@aname={'aname', 0x3d, '{\xd7{:[@$[,%/'}}, {@cache_loose}, {@cache_loose}, {@cache_readahead}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, '>(-'}}]}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0xc0028, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYBLOB="1c24cfa83d58d76fc196001d221710b3096ab9c51fc1ac"]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$session_to_parent(0x12) 30m12.688910671s ago: executing program 6 (id=1377): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x21085e, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}]}, 0x1, 0x516, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) 30m9.945115982s ago: executing program 6 (id=1383): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4db, &(0x7f0000000a40)="$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") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001980)=0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000b400b900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000002c0)={[{}, {@dioread_nolock}, {@quota}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'quota'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}, 0x1, 0x503, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x7, 0x5, 0x8ce, 0x7, 0x6, 0xa, 0xa5, 0x6, 0x1}) 29m53.189349252s ago: executing program 34 (id=1383): r0 = socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4db, &(0x7f0000000a40)="$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") r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001980)=0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000b400b900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r8, 0x0, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xb}, 0x10000004}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000002c0)={[{}, {@dioread_nolock}, {@quota}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, 'quota'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}, 0x1, 0x503, &(0x7f0000000ac0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x7, 0x5, 0x8ce, 0x7, 0x6, 0xa, 0xa5, 0x6, 0x1}) 8m15.523211951s ago: executing program 7 (id=8489): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 8m15.450747802s ago: executing program 7 (id=8493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) 8m15.325071204s ago: executing program 7 (id=8497): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7bc, 0x63, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x8180000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x6, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0xeeee0000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe, 0x0, 0x0, 0x0, 0xb0}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0xd, 0x26, 0x4}, {0x80a0000, 0x3}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]}) 8m15.218833305s ago: executing program 7 (id=8501): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m15.125354587s ago: executing program 7 (id=8502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280140003"], 0x44}}, 0x0) 8m15.024694048s ago: executing program 7 (id=8504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 8m14.979606969s ago: executing program 35 (id=8504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6.12806304s ago: executing program 1 (id=17520): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 6.007359502s ago: executing program 1 (id=17524): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 5.980671542s ago: executing program 1 (id=17525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200"], 0x0) 5.775778476s ago: executing program 1 (id=17529): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 5.627307568s ago: executing program 8 (id=17532): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$full(0xffffffffffffff9c, 0x0, 0xb0101, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x11) 5.546327259s ago: executing program 8 (id=17534): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x70}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x404, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) r5 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_setup(0x3c7e, &(0x7f00000002c0)={0x0, 0xe616, 0x8, 0x2, 0x1a5, 0x0, r4}) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 5.331397062s ago: executing program 5 (id=17538): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 5.134290585s ago: executing program 5 (id=17541): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 4.972013047s ago: executing program 5 (id=17542): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, 0x0, 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 4.76897863s ago: executing program 5 (id=17545): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 4.690259432s ago: executing program 0 (id=17547): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) 4.625667472s ago: executing program 8 (id=17548): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0xb0101, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) 4.486803294s ago: executing program 1 (id=17535): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 3.474811599s ago: executing program 0 (id=17552): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) 2.073971529s ago: executing program 1 (id=17553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308066200"], 0x0) 2.07135214s ago: executing program 4 (id=17554): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x70}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x404, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) r5 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_setup(0x3c7e, &(0x7f00000002c0)={0x0, 0xe616, 0x8, 0x2, 0x1a5, 0x0, r4}) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.965589371s ago: executing program 0 (id=17555): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 1.837554684s ago: executing program 0 (id=17556): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0xb0101, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x11) 1.834423763s ago: executing program 4 (id=17557): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.747838794s ago: executing program 4 (id=17558): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1.705801656s ago: executing program 4 (id=17559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 1.620557226s ago: executing program 0 (id=17560): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) 1.569988837s ago: executing program 4 (id=17561): r0 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) writev(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f386c", 0x53}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r5, &(0x7f0000000040), 0x373) 1.328265811s ago: executing program 4 (id=17562): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$full(0xffffffffffffff9c, 0x0, 0xb0101, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x11) 1.253279502s ago: executing program 8 (id=17563): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 1.100608404s ago: executing program 5 (id=17549): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0) socket(0x200000100000011, 0x3, 0x3) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x74, 0x2}}) write$evdev(r1, &(0x7f0000000040), 0x373) 364.004995ms ago: executing program 8 (id=17564): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 182.438977ms ago: executing program 8 (id=17565): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() wait4(0x0, &(0x7f0000000280), 0x1000000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x440000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000400)={'gretap0\x00', {0x2, 0x4e23, @local}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, 0x0, 0x4008052) mount$overlay(0x0, &(0x7f0000000580)='.\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}]}) 82.302569ms ago: executing program 0 (id=17567): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000380), &(0x7f0000001500)=0x60) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x70}}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x404, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x43}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0x4c000) r5 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_uring_setup(0x3c7e, &(0x7f00000002c0)={0x0, 0xe616, 0x8, 0x2, 0x1a5, 0x0, r4}) listen(0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) ppoll(&(0x7f0000000040)=[{r7, 0x3273}], 0x1, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0x60000002}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) 0s ago: executing program 5 (id=17568): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): 03] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.078656][ T703] usb 6-1: config 0 descriptor?? [ 1974.098300][T17120] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1974.278273][T17120] usb 9-1: Using ep0 maxpacket: 16 [ 1974.285790][T17120] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1974.303329][T17120] usb 9-1: no configurations [ 1974.311608][T17120] usb 9-1: can't read configurations, error -22 [ 1974.479288][T32414] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8649'. [ 1974.573574][T32529] xt_bpf: check failed: parse error [ 1974.689313][ T703] usb 6-1: language id specifier not provided by device, defaulting to English [ 1975.098941][ T703] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0031/input/input38 [ 1975.121841][ T703] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0031/input/input39 [ 1975.158128][ T703] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0031/input/input40 [ 1975.176534][ T703] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0031/input/input41 [ 1975.189994][ T383] netem: change failed [ 1975.218191][ T703] uclogic 0003:256C:006D.0031: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 1975.248923][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1975.248938][ T28] audit: type=1326 audit(2000002853.655:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.1.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1975.300802][ T703] usb 6-1: USB disconnect, device number 43 [ 1975.343382][ T28] audit: type=1326 audit(2000002853.655:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.1.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1975.387602][ T28] audit: type=1326 audit(2000002853.655:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.1.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1975.412544][ T28] audit: type=1326 audit(2000002853.655:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.1.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1975.441558][ T28] audit: type=1326 audit(2000002853.655:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=386 comm="syz.1.8678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1975.485176][ T407] device wg2 entered promiscuous mode [ 1975.740528][ T28] audit: type=1400 audit(2000002854.145:3215): avc: denied { setopt } for pid=835 comm="syz.0.8697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1975.763382][ T28] audit: type=1400 audit(2000002854.165:3216): avc: denied { wake_alarm } for pid=839 comm="syz.0.8699" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1976.059322][ T995] device pim6reg1 entered promiscuous mode [ 1976.301497][ T1026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8737'. [ 1976.897011][ T1303] overlayfs: failed to clone upperpath [ 1977.039687][ T28] audit: type=1400 audit(2000002855.445:3217): avc: denied { mount } for pid=1371 comm="syz.4.8778" name="/" dev="ramfs" ino=103146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1977.040536][ T1372] overlayfs: failed to clone upperpath [ 1977.080926][ T1411] tipc: Enabling of bearer rejected, failed to enable media [ 1977.149143][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1977.158925][ T1435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8786'. [ 1977.189678][ T1441] overlayfs: failed to clone upperpath [ 1977.268136][ T1457] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8797'. [ 1977.339472][ T28] audit: type=1400 audit(2000002855.745:3218): avc: denied { shutdown } for pid=1462 comm="syz.4.8800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1977.618952][ T1684] kvm: pic: non byte write [ 1977.851870][ T28] audit: type=1400 audit(2000002856.255:3219): avc: denied { write } for pid=1797 comm="syz.5.8817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1977.977435][ T703] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1978.086049][ T1802] overlayfs: failed to clone upperpath [ 1978.188375][ T703] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 1978.199214][ T703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.210572][ T703] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1978.220920][ T703] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1978.233844][ T703] usb 9-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 1978.242964][ T703] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.251803][ T703] usb 9-1: config 0 descriptor?? [ 1978.402565][ T2386] device wireguard0 entered promiscuous mode [ 1978.504910][ T2700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1978.512181][ T2700] IPv6: NLM_F_CREATE should be set when creating new route [ 1978.571845][ T2700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1978.579077][ T2700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1978.661298][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.669831][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.694435][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.707132][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.770549][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.777674][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.784719][ T703] wacom 0003:056A:00F4.0032: unknown main item tag 0x0 [ 1978.793594][ T703] wacom 0003:056A:00F4.0032: hidraw0: USB HID v0.00 Device [HID 056a:00f4] on usb-dummy_hcd.8-1/input0 [ 1978.867869][ T9193] usb 9-1: USB disconnect, device number 4 [ 1979.180639][ T3571] device macsec2 entered promiscuous mode [ 1979.186387][ T3571] device bridge0 entered promiscuous mode [ 1979.192314][ T3571] bridge0: port 4(macsec2) entered blocking state [ 1979.198763][ T3571] bridge0: port 4(macsec2) entered disabled state [ 1979.205944][ T3571] device bridge0 left promiscuous mode [ 1979.733208][ T4263] overlayfs: failed to clone upperpath [ 1979.763321][ T4326] netlink: 'syz.4.8924': attribute type 27 has an invalid length. [ 1980.276352][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1980.276366][ T28] audit: type=1400 audit(2000002858.676:3226): avc: denied { accept } for pid=5303 comm="syz.1.8953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1980.309456][ T28] audit: type=1400 audit(2000002858.676:3227): avc: denied { read } for pid=5303 comm="syz.1.8953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1980.329218][ T28] audit: type=1400 audit(2000002858.716:3228): avc: denied { relabelfrom } for pid=5297 comm="syz.8.8951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1980.349544][ T28] audit: type=1400 audit(2000002858.716:3229): avc: denied { relabelto } for pid=5297 comm="syz.8.8951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1980.469662][ T5516] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1980.570831][ T5733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8961'. [ 1980.592327][ T28] audit: type=1400 audit(2000002858.996:3230): avc: denied { read } for pid=5563 comm="syz.8.8959" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1980.615602][ T28] audit: type=1400 audit(2000002859.016:3231): avc: denied { open } for pid=5563 comm="syz.8.8959" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1981.131382][ T28] audit: type=1326 audit(2000002859.536:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1981.155012][ T28] audit: type=1326 audit(2000002859.536:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1981.178818][ T28] audit: type=1326 audit(2000002859.536:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1981.202922][ T28] audit: type=1326 audit(2000002859.536:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.1.8989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 1983.105806][ T7911] fuse: Bad value for 'fd' [ 1983.115971][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1983.138346][ T7912] device bridge_slave_0 left promiscuous mode [ 1983.148391][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.185082][ T7912] device bridge_slave_1 left promiscuous mode [ 1983.191338][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.626401][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1985.626418][ T28] audit: type=1400 audit(2000002864.027:3251): avc: denied { read } for pid=12391 comm="syz.4.9109" path="socket:[106083]" dev="sockfs" ino=106083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1986.179986][ T28] audit: type=1400 audit(2000002864.587:3252): avc: denied { create } for pid=13516 comm="syz.8.9120" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1989.250076][T18331] xt_bpf: check failed: parse error [ 1990.156063][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9230'. [ 1991.656502][ T28] audit: type=1400 audit(2000002870.069:3253): avc: denied { lock } for pid=22087 comm="syz.5.9265" path="socket:[106949]" dev="sockfs" ino=106949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1992.098528][T22718] kvm [22713]: vcpu1, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x800 [ 1992.109495][T22718] kvm [22713]: vcpu1, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x800 [ 1992.120863][T22718] kvm [22713]: vcpu1, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xbe702911 [ 1992.662645][ T28] audit: type=1400 audit(2000002871.069:3254): avc: denied { associate } for pid=23596 comm="syz.1.9285" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1994.845532][ T28] audit: type=1326 audit(2000002873.259:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25220 comm="syz.1.9322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x0 [ 1995.004966][ T1136] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1995.183191][ T1136] usb 9-1: Using ep0 maxpacket: 16 [ 1995.216503][ T1136] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1995.224719][ T1136] usb 9-1: config 0 has no interface number 0 [ 1995.230881][ T1136] usb 9-1: config 0 interface 2 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1995.243044][ T1136] usb 9-1: config 0 interface 2 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1995.252825][ T1136] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1995.259465][ T1136] usb 9-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.08 [ 1995.268506][ T1136] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1995.276917][ T1136] usb 9-1: config 0 descriptor?? [ 1995.714169][ T1136] logitech-djreceiver 0003:046D:C517.0033: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.8-1/input2 [ 1995.920393][ T9141] usb 9-1: USB disconnect, device number 5 [ 1996.441575][ T28] audit: type=1400 audit(2000002874.850:3256): avc: denied { setopt } for pid=27260 comm="syz.8.9352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1996.944002][ T28] audit: type=1400 audit(2000002875.360:3257): avc: denied { connect } for pid=28195 comm="syz.4.9366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1996.963907][ T28] audit: type=1400 audit(2000002875.360:3258): avc: denied { write } for pid=28195 comm="syz.4.9366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1997.288361][T28305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9368'. [ 1997.393339][ T28] audit: type=1400 audit(2000002875.810:3259): avc: denied { ioctl } for pid=28311 comm="syz.4.9369" path="socket:[107261]" dev="sockfs" ino=107261 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1997.617253][T28635] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9372'. [ 1998.318112][T29474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1998.328718][T29474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1998.497706][T29550] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9393'. [ 1999.442120][ T703] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1999.623082][ T703] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.633184][ T703] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1999.643405][ T703] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1999.652463][ T703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1999.660421][ T703] usb 9-1: Product: syz [ 1999.664580][ T703] usb 9-1: Manufacturer: syz [ 1999.669156][ T703] usb 9-1: SerialNumber: syz [ 1999.876092][ T703] usb 9-1: 0:2 : does not exist [ 1999.883051][ T703] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1999.893234][ T703] usb 9-1: USB disconnect, device number 6 [ 2000.494265][T31169] netlink: 'syz.4.9426': attribute type 4 has an invalid length. [ 2000.584537][T31174] bridge0: port 1(vlan2) entered blocking state [ 2000.590846][T31174] bridge0: port 1(vlan2) entered disabled state [ 2000.949200][T31169] netlink: 25 bytes leftover after parsing attributes in process `syz.4.9426'. [ 2002.260978][ T1278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9464'. [ 2002.269974][ T1278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9464'. [ 2002.667769][ T1993] device wg2 left promiscuous mode [ 2003.637669][ T3112] xt_hashlimit: size too large, truncated to 1048576 [ 2004.056890][ T3543] xt_hashlimit: size too large, truncated to 1048576 [ 2004.304252][ T3933] device pim6reg1 entered promiscuous mode [ 2004.443776][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9512'. [ 2004.452720][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9512'. [ 2004.545909][ T4416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9509'. [ 2004.634176][ T4564] xt_hashlimit: size too large, truncated to 1048576 [ 2005.034864][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9526'. [ 2005.043903][ T5304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9526'. [ 2005.235325][ T5580] xt_hashlimit: size too large, truncated to 1048576 [ 2005.311065][ T28] audit: type=1400 audit(2000002883.722:3260): avc: denied { setattr } for pid=5651 comm="syz.8.9533" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2005.614634][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9543'. [ 2005.623551][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9543'. [ 2009.161830][ T28] audit: type=1400 audit(2000002887.583:3261): avc: denied { create } for pid=9617 comm="syz.4.9592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 2011.101724][T12008] overlayfs: missing 'lowerdir' [ 2011.107413][T12008] overlayfs: failed to clone upperpath [ 2013.296916][T16033] xt_hashlimit: size too large, truncated to 1048576 [ 2014.231145][ T28] audit: type=1400 audit(2000002892.624:3262): avc: denied { map } for pid=17572 comm="syz.8.9686" path="socket:[109832]" dev="sockfs" ino=109832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2014.972958][ T28] audit: type=1400 audit(2000002893.384:3263): avc: denied { connect } for pid=19303 comm="syz.5.9704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2015.509389][ T28] audit: type=1326 audit(2000002893.924:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.535617][ T28] audit: type=1326 audit(2000002893.924:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.560045][ T28] audit: type=1326 audit(2000002893.944:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.584492][ T28] audit: type=1326 audit(2000002893.944:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.617825][ T28] audit: type=1326 audit(2000002893.944:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.667448][ T28] audit: type=1326 audit(2000002893.944:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.691699][ T28] audit: type=1326 audit(2000002893.944:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.716652][ T28] audit: type=1326 audit(2000002893.944:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20454 comm="syz.1.9718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2015.865722][T20931] 9pnet_fd: Insufficient options for proto=fd [ 2018.635282][T24685] fuse: Bad value for 'fd' [ 2019.748193][T26128] 9pnet_fd: Insufficient options for proto=fd [ 2022.075916][T30210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9824'. [ 2024.862237][ T500] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9857'. [ 2025.720707][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9874'. [ 2027.213673][ T4476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9899'. [ 2027.289601][ T4581] overlayfs: failed to clone upperpath [ 2027.490618][ T5091] 9pnet_fd: Insufficient options for proto=fd [ 2027.740766][ T5092] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9902'. [ 2028.207992][ T6337] 9pnet_fd: Insufficient options for proto=fd [ 2028.453823][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9921'. [ 2028.473287][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9925'. [ 2028.482470][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9925'. [ 2029.561892][ T8531] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9939'. [ 2029.790117][ T9265] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9951'. [ 2029.972126][ T9575] incfs: Error accessing: ./file0. [ 2029.978957][ T9575] incfs: mount failed -2 [ 2030.206552][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 2030.206621][ T28] audit: type=1400 audit(2000002908.628:3372): avc: denied { map } for pid=9944 comm="syz.8.9959" path="socket:[110539]" dev="sockfs" ino=110539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2030.250479][ T28] audit: type=1400 audit(2000002908.628:3373): avc: denied { read } for pid=9944 comm="syz.8.9959" path="socket:[110539]" dev="sockfs" ino=110539 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2030.761632][T10643] fuse: Bad value for 'fd' [ 2031.586794][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9969'. [ 2031.597292][T11017] device bridge0 entered promiscuous mode [ 2031.603302][T11017] bridge0: port 1(macsec1) entered blocking state [ 2031.609762][T11017] bridge0: port 1(macsec1) entered disabled state [ 2031.617368][T11017] device bridge0 left promiscuous mode [ 2031.858272][T11481] futex_wake_op: syz.4.9975 tries to shift op by -1; fix this program [ 2032.453270][ T28] audit: type=1400 audit(2000002910.868:3374): avc: denied { write } for pid=11582 comm="syz.8.9976" name="file0" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2032.456089][T11793] block device autoloading is deprecated and will be removed. [ 2032.479681][ T28] audit: type=1400 audit(2000002910.868:3375): avc: denied { open } for pid=11582 comm="syz.8.9976" path="/109/file0" dev="tmpfs" ino=596 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2033.813465][T13697] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9998'. [ 2033.884546][ T28] audit: type=1400 audit(2000002912.309:3376): avc: denied { create } for pid=14007 comm="syz.1.10005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2033.886301][T14011] overlayfs: failed to clone upperpath [ 2033.920125][ T28] audit: type=1400 audit(2000002912.339:3377): avc: denied { mount } for pid=14007 comm="syz.1.10005" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2033.943022][ T28] audit: type=1400 audit(2000002912.339:3378): avc: denied { watch_reads } for pid=14007 comm="syz.1.10005" path="/2166/file0" dev="tmpfs" ino=11447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 2034.738756][T16108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10024'. [ 2036.363025][T18167] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10053'. [ 2036.889126][T18583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10057'. [ 2037.256159][T18784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10060'. [ 2037.265283][T18784] device bridge_slave_1 left promiscuous mode [ 2037.271426][T18784] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.279286][T18784] device bridge_slave_0 left promiscuous mode [ 2037.286619][T18784] bridge0: port 1(bridge_slave_0) entered disabled state [ 2038.234554][T20424] xt_connbytes: Forcing CT accounting to be enabled [ 2038.241257][T20424] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2038.661161][T20957] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10081'. [ 2039.414320][T22608] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10099'. [ 2040.034551][T23741] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10112'. [ 2040.177564][ T28] audit: type=1400 audit(2000002918.600:3379): avc: denied { getopt } for pid=24049 comm="syz.0.10117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2040.858350][T24414] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10118'. [ 2041.469195][ T28] audit: type=1400 audit(2000002919.890:3380): avc: denied { ioctl } for pid=25833 comm="syz.5.10136" path="socket:[113140]" dev="sockfs" ino=113140 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2041.830210][T26309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10142'. [ 2042.421380][ T28] audit: type=1400 audit(2000002920.841:3381): avc: denied { getopt } for pid=27438 comm="syz.5.10153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2042.442442][ T28] audit: type=1400 audit(2000002920.871:3382): avc: denied { setopt } for pid=27438 comm="syz.5.10153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2042.549912][ T28] audit: type=1326 audit(2000002920.971:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27753 comm="syz.4.10160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40cf78e929 code=0x0 [ 2043.614600][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10179'. [ 2044.153795][T30534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=274 sclass=netlink_xfrm_socket pid=30534 comm=syz.8.10189 [ 2044.267931][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10191'. [ 2044.293801][T30534] bridge0: port 1(vlan2) entered blocking state [ 2044.300081][T30534] bridge0: port 1(vlan2) entered disabled state [ 2044.645778][ T28] audit: type=1400 audit(2000002923.071:3384): avc: denied { setopt } for pid=30900 comm="syz.8.10195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2044.919904][T31615] block device autoloading is deprecated and will be removed. [ 2044.930788][T31615] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2044.942089][T31615] FAT-fs (loop9): unable to read boot sector [ 2045.217284][T31931] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O00000000000000000005 [ 2047.522719][T32650] syz.8.10214[32650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2047.522814][T32650] syz.8.10214[32650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2047.778688][ T683] netlink: 'syz.1.10226': attribute type 4 has an invalid length. [ 2047.926423][ T28] audit: type=1326 audit(2000002926.352:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2047.980983][ T28] audit: type=1326 audit(2000002926.412:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.016210][ T28] audit: type=1326 audit(2000002926.442:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.040087][ T28] audit: type=1326 audit(2000002926.442:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.086288][ T28] audit: type=1326 audit(2000002926.442:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.110451][ T28] audit: type=1326 audit(2000002926.442:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.142805][ T28] audit: type=1326 audit(2000002926.442:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.211126][ T28] audit: type=1326 audit(2000002926.442:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.270795][ T28] audit: type=1326 audit(2000002926.442:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2048.333075][ T28] audit: type=1326 audit(2000002926.442:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=950 comm="syz.1.10229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f00c638e929 code=0x7ffc0000 [ 2049.651949][ T3444] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10256'. [ 2049.782665][ T3724] netlink: 'syz.1.10259': attribute type 4 has an invalid length. [ 2049.790901][ T3724] netlink: 'syz.1.10259': attribute type 4 has an invalid length. [ 2049.863172][ T1136] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2050.051278][ T1136] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2050.070494][ T1136] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 2050.083385][ T1136] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2050.096557][ T1136] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2050.107149][ T1136] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.115394][ T1136] usb 9-1: Product: syz [ 2050.147889][ T1136] usb 9-1: Manufacturer: syz [ 2050.153175][ T1136] usb 9-1: SerialNumber: syz [ 2050.158758][ T1136] usb 9-1: config 0 descriptor?? [ 2050.167033][ T3336] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2050.174723][ T3336] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2050.413212][ T3336] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2050.422465][ T3336] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2050.764632][ T5814] futex_wake_op: syz.4.10281 tries to shift op by -1; fix this program [ 2051.370257][ T1136] dm9601 9-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 2051.381157][ T1136] dm9601 9-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 2051.394406][ T1136] usb 9-1: USB disconnect, device number 7 [ 2051.402207][ T1136] dm9601 9-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.8-1, Davicom DM96xx USB 10/100 Ethernet [ 2051.727751][ T8141] bridge0: port 1(syz_tun) entered blocking state [ 2051.734409][ T8141] bridge0: port 1(syz_tun) entered disabled state [ 2051.741824][ T8141] device syz_tun entered promiscuous mode [ 2051.966060][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10308'. [ 2052.151032][ T9129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2053.217135][T10804] syz.8.10327[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2053.217345][T10804] syz.8.10327[10804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2053.499164][T11111] fuse: Bad value for 'fd' [ 2053.513177][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 2053.513190][ T28] audit: type=1326 audit(2000002931.943:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.549726][ T28] audit: type=1326 audit(2000002931.973:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.573818][ T28] audit: type=1326 audit(2000002931.973:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.597964][ T28] audit: type=1326 audit(2000002931.973:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.622336][ T28] audit: type=1326 audit(2000002931.973:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.657763][ T28] audit: type=1326 audit(2000002931.973:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.744891][ T28] audit: type=1326 audit(2000002931.973:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.768749][ T28] audit: type=1326 audit(2000002931.973:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.802750][ T28] audit: type=1326 audit(2000002931.973:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2053.896036][ T28] audit: type=1326 audit(2000002931.973:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11155 comm="syz.5.10336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f41b1d8e929 code=0x7ffc0000 [ 2054.201682][T12154] xt_connbytes: Forcing CT accounting to be enabled [ 2054.208405][T12154] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2054.444398][T12302] device ip6gretap0 entered promiscuous mode [ 2054.450829][T12302] device macsec1 entered promiscuous mode [ 2054.459690][T12302] device ip6gretap0 left promiscuous mode [ 2054.961075][T13042] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10355'. [ 2055.764919][T14509] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10372'. [ 2056.039372][T15231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6146 sclass=netlink_route_socket pid=15231 comm=syz.0.10381 [ 2056.688092][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10393'. [ 2057.485337][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10413'. [ 2057.926881][T19578] overlayfs: missing 'lowerdir' [ 2058.283753][T20677] overlayfs: missing 'lowerdir' [ 2060.469174][T25084] netlink: 43 bytes leftover after parsing attributes in process `syz.8.10485'. [ 2060.478327][T25084] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10485'. [ 2060.847174][T25454] overlayfs: missing 'lowerdir' [ 2060.867857][T25456] overlayfs: missing 'lowerdir' [ 2061.159982][T26162] overlayfs: missing 'lowerdir' [ 2061.188577][T26243] overlayfs: missing 'lowerdir' [ 2062.043751][T28183] overlayfs: missing 'lowerdir' [ 2062.260191][T28776] overlayfs: missing 'lowerdir' [ 2064.098902][T32632] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10580'. [ 2064.721347][ T2266] overlayfs: missing 'lowerdir' [ 2066.336410][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 2066.336425][ T28] audit: type=1400 audit(2000002944.766:3558): avc: denied { setopt } for pid=6235 comm="syz.4.10646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2067.891276][ T9893] syz.8.10683[9893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.891612][ T9893] syz.8.10683[9893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2068.037790][T10345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10692'. [ 2069.569184][ T9200] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 2069.765585][ T9200] usb 9-1: Using ep0 maxpacket: 16 [ 2069.772250][ T9200] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.782823][ T9200] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2069.793069][ T9200] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2069.842989][ T9200] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2069.852835][ T9200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.860913][ T9200] usb 9-1: Product: syz [ 2069.865070][ T9200] usb 9-1: Manufacturer: syz [ 2069.869954][ T9200] usb 9-1: SerialNumber: syz [ 2069.875152][ T9200] usb 9-1: config 0 descriptor?? [ 2070.167270][T15209] overlayfs: missing 'lowerdir' [ 2070.829254][T16766] overlayfs: missing 'lowerdir' [ 2072.105489][ T703] usb 9-1: USB disconnect, device number 8 [ 2072.111460][ T28] audit: type=1400 audit(2000002950.538:3559): avc: denied { write } for pid=19740 comm="syz.8.10791" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2072.186162][ T28] audit: type=1326 audit(2000002950.608:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19740 comm="syz.8.10791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc23a78e929 code=0x0 [ 2072.247070][T19741] netlink: 'syz.8.10791': attribute type 27 has an invalid length. [ 2072.386737][ T28] audit: type=1400 audit(2000002950.808:3561): avc: denied { bind } for pid=19740 comm="syz.8.10791" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2072.407408][ T28] audit: type=1400 audit(2000002950.808:3562): avc: denied { name_bind } for pid=19740 comm="syz.8.10791" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 2072.414027][T19741] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2072.429013][ T28] audit: type=1400 audit(2000002950.818:3563): avc: denied { node_bind } for pid=19740 comm="syz.8.10791" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 2072.523968][T19741] device veth0_vlan left promiscuous mode [ 2072.530364][T19741] device veth0_vlan entered promiscuous mode [ 2072.537997][T19741] device veth1_macvtap left promiscuous mode [ 2072.544714][T19741] device veth1_macvtap entered promiscuous mode [ 2072.556070][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2072.563600][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2072.571160][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2072.580513][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2072.589352][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2072.597666][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2072.612702][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2072.631162][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2072.640369][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2072.650024][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2072.658946][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2072.667266][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2072.676573][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2072.684866][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2072.693231][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2072.701827][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2072.712755][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2072.722204][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2072.730902][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2072.740369][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2072.748804][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2072.757777][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2072.766231][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2072.775869][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2072.784572][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2072.800380][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2072.808785][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2072.816930][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2072.829639][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2072.838676][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2072.847132][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2072.854910][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2072.862316][ T2357] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2073.235347][T21947] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2074.140216][T23762] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10829'. [ 2075.669249][T17127] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2075.855159][T17127] usb 9-1: Using ep0 maxpacket: 16 [ 2075.863596][T17127] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.926870][T17127] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2075.942681][T17127] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2075.960043][T17127] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2075.969810][T17127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.978148][T17127] usb 9-1: Product: syz [ 2075.982619][T17127] usb 9-1: Manufacturer: syz [ 2075.995277][T17127] usb 9-1: SerialNumber: syz [ 2076.001720][T17127] usb 9-1: config 0 descriptor?? [ 2077.878159][ T9133] usb 9-1: USB disconnect, device number 9 [ 2081.821349][ T4899] syz.8.10983[4899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2081.821418][ T4899] syz.8.10983[4899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2081.843672][ T5055] overlayfs: missing 'lowerdir' [ 2082.583599][ T6824] incfs: Backing dir is not set, filesystem can't be mounted. [ 2082.652528][ T6824] incfs: mount failed -2 [ 2082.997235][ T7252] incfs: Backing dir is not set, filesystem can't be mounted. [ 2083.005562][ T7252] incfs: mount failed -2 [ 2084.214173][ T9547] overlayfs: missing 'lowerdir' [ 2084.283892][ T28] audit: type=1400 audit(2000002962.720:3564): avc: denied { mount } for pid=9654 comm="syz.4.11056" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2084.301095][ T9657] overlayfs: failed to clone lowerpath [ 2084.639008][T10305] syz.8.11051[10305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2084.639078][T10305] syz.8.11051[10305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2084.658222][T10395] overlayfs: failed to clone lowerpath [ 2084.665040][T10392] overlayfs: missing 'lowerdir' [ 2084.710202][T10399] overlayfs: missing 'lowerdir' [ 2085.124575][T11132] overlayfs: missing 'lowerdir' [ 2087.924600][T14963] overlayfs: missing 'lowerdir' [ 2090.944995][T20884] overlayfs: missing 'lowerdir' [ 2094.047676][T27537] syz.8.11250[27537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2094.047751][T27537] syz.8.11250[27537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2095.978221][ T9141] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 2096.219427][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2096.226119][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.236392][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2096.248572][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2096.377388][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2096.386491][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.395258][ T9141] usb 9-1: Product: syz [ 2096.400524][ T9141] usb 9-1: Manufacturer: syz [ 2096.405268][ T9141] usb 9-1: SerialNumber: syz [ 2096.412099][ T9141] usb 9-1: config 0 descriptor?? [ 2097.661390][ T1878] overlayfs: missing 'lowerdir' [ 2098.251287][ T9133] usb 9-1: USB disconnect, device number 10 [ 2099.078816][ T9133] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 2099.438680][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2099.455320][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.475297][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2099.485985][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2099.506637][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2099.559392][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.613842][ T9133] usb 9-1: Product: syz [ 2099.628310][ T9133] usb 9-1: Manufacturer: syz [ 2099.643757][ T9133] usb 9-1: SerialNumber: syz [ 2099.667429][ T9133] usb 9-1: config 0 descriptor?? [ 2101.397727][ T9141] usb 9-1: USB disconnect, device number 11 [ 2101.499637][ T7670] incfs: Backing dir is not set, filesystem can't be mounted. [ 2101.507168][ T7670] incfs: mount failed -2 [ 2102.591320][ T9589] device macsec2 entered promiscuous mode [ 2102.605048][ T9590] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2102.608002][ T9589] device ip6gretap0 entered promiscuous mode [ 2102.620175][ T9589] device ip6gretap0 left promiscuous mode [ 2104.411430][T12926] xt_connbytes: Forcing CT accounting to be enabled [ 2104.418295][T12926] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'nat' [ 2106.787028][ T9189] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2106.966926][ T9189] usb 9-1: Using ep0 maxpacket: 16 [ 2106.977285][ T9189] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.989547][ T9189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2106.999690][ T9189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2107.015942][ T9189] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2107.059497][ T9189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.068531][ T9189] usb 9-1: Product: syz [ 2107.073296][ T9189] usb 9-1: Manufacturer: syz [ 2107.078082][ T9189] usb 9-1: SerialNumber: syz [ 2107.084326][ T9189] usb 9-1: config 0 descriptor?? [ 2109.159449][ T9141] usb 9-1: USB disconnect, device number 12 [ 2109.420487][T22720] overlayfs: missing 'lowerdir' [ 2110.286697][T24167] incfs: Backing dir is not set, filesystem can't be mounted. [ 2110.304600][T24167] incfs: mount failed -2 [ 2111.488257][T25943] overlayfs: missing 'lowerdir' [ 2114.199545][T28803] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11626'. [ 2115.242509][T29648] overlayfs: missing 'lowerdir' [ 2115.381377][T29840] incfs: Backing dir is not set, filesystem can't be mounted. [ 2115.398239][T29840] incfs: mount failed -2 [ 2117.620531][T31702] 9pnet_fd: Insufficient options for proto=fd [ 2117.888050][T31910] incfs: ino conflict with backing FS 1 [ 2118.415771][ T28] audit: type=1400 audit(2000002996.328:3565): avc: denied { mounton } for pid=31700 comm="syz.8.11664" path="/181/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 2118.720060][ T28] audit: type=1400 audit(2000002996.378:3566): avc: denied { getattr } for pid=31700 comm="syz.8.11664" name="/" dev="incremental-fs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2118.747325][T31596] incfs: Backing dir is not set, filesystem can't be mounted. [ 2118.766258][T31596] incfs: mount failed -2 [ 2118.802567][ T28] audit: type=1400 audit(2000002997.238:3567): avc: denied { unmount } for pid=30294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2118.946190][T32279] incfs: Backing dir is not set, filesystem can't be mounted. [ 2118.953725][T32279] incfs: mount failed -2 [ 2119.977300][ T1611] overlayfs: missing 'lowerdir' [ 2120.718157][ T3298] incfs: Backing dir is not set, filesystem can't be mounted. [ 2120.726120][ T3298] incfs: mount failed -2 [ 2120.933105][ T3314] incfs: Backing dir is not set, filesystem can't be mounted. [ 2120.941148][ T3314] incfs: mount failed -2 [ 2121.291344][ T4244] incfs: Backing dir is not set, filesystem can't be mounted. [ 2121.299435][ T4244] incfs: mount failed -2 [ 2121.836711][ T5056] 9pnet_fd: Insufficient options for proto=fd [ 2123.603405][ T7160] incfs: ino conflict with backing FS 1 [ 2126.179175][ T9912] incfs: Backing dir is not set, filesystem can't be mounted. [ 2126.186901][ T9912] incfs: mount failed -2 [ 2131.541318][ T9141] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2131.911242][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2131.917601][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.001823][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2132.039191][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2132.149406][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2132.160075][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.168212][ T9141] usb 9-1: Product: syz [ 2132.172615][ T9141] usb 9-1: Manufacturer: syz [ 2132.177231][ T9141] usb 9-1: SerialNumber: syz [ 2132.183063][ T9141] usb 9-1: config 0 descriptor?? [ 2133.772556][T22123] overlayfs: failed to clone lowerpath [ 2133.818544][ T9189] usb 9-1: USB disconnect, device number 13 [ 2134.018468][T22602] incfs: Backing dir is not set, filesystem can't be mounted. [ 2134.027545][T22602] incfs: mount failed -2 [ 2137.890740][ T9133] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2138.119852][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2138.128162][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2138.151413][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2138.162050][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2138.227011][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2138.269793][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.277816][ T9133] usb 9-1: Product: syz [ 2138.299798][ T9133] usb 9-1: Manufacturer: syz [ 2138.304433][ T9133] usb 9-1: SerialNumber: syz [ 2138.472803][ T9133] usb 9-1: config 0 descriptor?? [ 2138.785791][T31141] incfs: Backing dir is not set, filesystem can't be mounted. [ 2138.820339][T31141] incfs: mount failed -2 [ 2139.546396][ T621] incfs: Backing dir is not set, filesystem can't be mounted. [ 2139.554455][ T621] incfs: mount failed -2 [ 2140.356377][ T9133] usb 9-1: USB disconnect, device number 14 [ 2140.490804][ T2043] incfs: Backing dir is not set, filesystem can't be mounted. [ 2140.498360][ T2043] incfs: mount failed -2 [ 2141.457110][ T4584] incfs: Backing dir is not set, filesystem can't be mounted. [ 2141.464856][ T4584] incfs: mount failed -2 [ 2142.564955][ T5768] incfs: ino conflict with backing FS 1 [ 2142.616750][ T5768] incfs: iterate_incfs_dir / -22 [ 2144.641019][ T8618] incfs: Backing dir is not set, filesystem can't be mounted. [ 2144.648988][ T8618] incfs: mount failed -2 [ 2145.620107][ T9484] incfs: Backing dir is not set, filesystem can't be mounted. [ 2145.627865][ T9484] incfs: mount failed -2 [ 2146.078082][ T9133] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2146.278082][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2146.372642][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2146.382831][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2146.422300][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2146.437891][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2146.458212][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.466338][ T9133] usb 9-1: Product: syz [ 2146.688546][ T9133] usb 9-1: Manufacturer: syz [ 2146.693195][ T9133] usb 9-1: SerialNumber: syz [ 2146.818248][ T9133] usb 9-1: config 0 descriptor?? [ 2148.604899][ T9133] usb 9-1: USB disconnect, device number 15 [ 2148.722450][T14600] incfs: Backing dir is not set, filesystem can't be mounted. [ 2148.759964][T14600] incfs: mount failed -2 [ 2149.616280][T15837] incfs: Backing dir is not set, filesystem can't be mounted. [ 2149.624173][T15837] incfs: mount failed -2 [ 2150.297158][ T9133] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2150.537052][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2150.543980][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.568277][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2150.630034][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2150.644522][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2150.655492][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.698238][ T9133] usb 9-1: Product: syz [ 2150.702429][ T9133] usb 9-1: Manufacturer: syz [ 2150.707480][ T9133] usb 9-1: SerialNumber: syz [ 2150.756728][ T9133] usb 9-1: config 0 descriptor?? [ 2150.768548][T17329] incfs: Backing dir is not set, filesystem can't be mounted. [ 2150.778309][T17329] incfs: mount failed -2 [ 2151.391673][T18750] incfs: Backing dir is not set, filesystem can't be mounted. [ 2151.399578][T18750] incfs: mount failed -2 [ 2151.638178][T19334] incfs: Backing dir is not set, filesystem can't be mounted. [ 2151.649997][T19334] incfs: mount failed -2 [ 2152.577824][ T9141] usb 9-1: USB disconnect, device number 16 [ 2152.729752][T21610] incfs: Backing dir is not set, filesystem can't be mounted. [ 2152.746980][T21610] incfs: mount failed -2 [ 2156.531365][ T9189] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2156.715704][ T9189] usb 9-1: Using ep0 maxpacket: 16 [ 2156.722718][ T9189] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.735425][ T9189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2156.746285][ T9189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2156.764082][ T9189] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2156.775039][ T9189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.783295][ T9189] usb 9-1: Product: syz [ 2156.787879][ T9189] usb 9-1: Manufacturer: syz [ 2156.792488][ T9189] usb 9-1: SerialNumber: syz [ 2156.834285][ T9189] usb 9-1: config 0 descriptor?? [ 2158.748962][ T9141] usb 9-1: USB disconnect, device number 17 [ 2159.850181][T30574] incfs: Backing dir is not set, filesystem can't be mounted. [ 2159.866198][T30574] incfs: mount failed -2 [ 2161.470609][ T28] audit: type=1400 audit(2000003039.708:3568): avc: denied { create } for pid=32670 comm="syz.8.12428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2164.573380][ T5739] incfs: ino conflict with backing FS 1 [ 2166.176496][ T6079] incfs: Backing dir is not set, filesystem can't be mounted. [ 2166.188961][ T6079] incfs: mount failed -2 [ 2168.043224][ T9189] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 2168.229553][ T9189] usb 9-1: Using ep0 maxpacket: 16 [ 2168.240786][ T9189] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.286085][ T9189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2168.323631][ T9189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2168.339073][ T9189] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2168.349151][ T9189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.357258][ T9189] usb 9-1: Product: syz [ 2168.361427][ T9189] usb 9-1: Manufacturer: syz [ 2168.366339][ T9189] usb 9-1: SerialNumber: syz [ 2168.371643][ T9189] usb 9-1: config 0 descriptor?? [ 2168.725204][T10565] 9pnet_fd: Insufficient options for proto=fd [ 2169.226422][T11632] 9pnet_fd: Insufficient options for proto=fd [ 2170.135861][ T9189] usb 9-1: USB disconnect, device number 18 [ 2170.363989][T14053] 9pnet_fd: Insufficient options for proto=fd [ 2170.953739][ T28] audit: type=1400 audit(2000003049.410:3569): avc: denied { mounton } for pid=13842 comm="syz.8.12594" path="/230/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 2171.035651][ T28] audit: type=1400 audit(2000003049.490:3570): avc: denied { ioctl } for pid=13842 comm="syz.8.12594" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 2171.793831][ T9133] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2172.065201][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2172.071816][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.144249][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2172.154320][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2172.195678][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2172.223087][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2172.233108][ T9133] usb 9-1: Product: syz [ 2172.252502][ T9133] usb 9-1: Manufacturer: syz [ 2172.257141][ T9133] usb 9-1: SerialNumber: syz [ 2172.268969][ T9133] usb 9-1: config 0 descriptor?? [ 2173.582524][T20241] 9pnet_fd: Insufficient options for proto=fd [ 2173.842097][T20960] incfs: Backing dir is not set, filesystem can't be mounted. [ 2173.849699][T20960] incfs: mount failed -2 [ 2174.228584][ T703] usb 9-1: USB disconnect, device number 19 [ 2175.042717][T23537] 9pnet_fd: Insufficient options for proto=fd [ 2175.148190][T23749] 9pnet_fd: Insufficient options for proto=fd [ 2175.229803][T23855] incfs: Backing dir is not set, filesystem can't be mounted. [ 2175.283823][T23855] incfs: mount failed -2 [ 2176.890808][T26538] 9pnet_fd: Insufficient options for proto=fd [ 2177.049592][ T9133] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2177.335549][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2177.341863][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.353120][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2177.362826][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2177.523098][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2177.532270][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.540534][ T9133] usb 9-1: Product: syz [ 2177.713653][ T9133] usb 9-1: Manufacturer: syz [ 2177.718529][ T9133] usb 9-1: SerialNumber: syz [ 2177.756446][ T9133] usb 9-1: config 0 descriptor?? [ 2178.943316][T30457] incfs: Backing dir is not set, filesystem can't be mounted. [ 2178.953309][T30459] 9pnet_fd: Insufficient options for proto=fd [ 2178.966502][T30457] incfs: mount failed -2 [ 2179.398762][T31361] 9pnet_fd: Insufficient options for proto=fd [ 2179.442588][ T9141] usb 9-1: USB disconnect, device number 20 [ 2180.910891][ T1393] 9pnet_fd: Insufficient options for proto=fd [ 2181.100640][ T9133] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2181.314560][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2181.483524][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.605155][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2181.643666][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2181.658612][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2181.677904][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.686161][ T9133] usb 9-1: Product: syz [ 2181.746831][ T9133] usb 9-1: Manufacturer: syz [ 2181.751753][ T9133] usb 9-1: SerialNumber: syz [ 2181.757177][ T9133] usb 9-1: config 0 descriptor?? [ 2183.528313][ T9133] usb 9-1: USB disconnect, device number 21 [ 2184.475664][ T7613] incfs: Backing dir is not set, filesystem can't be mounted. [ 2184.483420][ T7613] incfs: mount failed -2 [ 2185.239600][ T9178] incfs: Backing dir is not set, filesystem can't be mounted. [ 2185.252840][ T9178] incfs: mount failed -2 [ 2186.057591][T10448] incfs: Backing dir is not set, filesystem can't be mounted. [ 2186.076441][T10448] incfs: mount failed -2 [ 2186.100828][ T9133] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2186.290452][T11097] incfs: Backing dir is not set, filesystem can't be mounted. [ 2186.298290][T11097] incfs: mount failed -2 [ 2186.338652][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2186.349507][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2186.369137][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2186.380019][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2186.449171][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2186.458252][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.497774][ T9133] usb 9-1: Product: syz [ 2186.502027][ T9133] usb 9-1: Manufacturer: syz [ 2186.506629][ T9133] usb 9-1: SerialNumber: syz [ 2186.513178][ T9133] usb 9-1: config 0 descriptor?? [ 2186.922257][T12370] incfs: Backing dir is not set, filesystem can't be mounted. [ 2186.935439][T12370] incfs: mount failed -2 [ 2187.456758][T12950] incfs: Backing dir is not set, filesystem can't be mounted. [ 2187.464562][T12950] incfs: mount failed -2 [ 2187.899876][T14214] incfs: Backing dir is not set, filesystem can't be mounted. [ 2187.907619][T14214] incfs: mount failed -2 [ 2188.369207][T15138] overlayfs: failed to clone lowerpath [ 2188.519734][ T9141] usb 9-1: USB disconnect, device number 22 [ 2189.418647][ T9141] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2189.608858][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2189.615752][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2189.654270][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2189.665413][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2189.707031][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2189.719686][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.777651][ T9141] usb 9-1: Product: syz [ 2189.782075][ T9141] usb 9-1: Manufacturer: syz [ 2189.849273][ T9141] usb 9-1: SerialNumber: syz [ 2189.878678][ T9141] usb 9-1: config 0 descriptor?? [ 2191.720589][ T9133] usb 9-1: USB disconnect, device number 23 [ 2191.799286][T21651] incfs: Backing dir is not set, filesystem can't be mounted. [ 2191.807179][T21651] incfs: mount failed -2 [ 2193.418316][T24441] incfs: Backing dir is not set, filesystem can't be mounted. [ 2193.425845][T24441] incfs: mount failed -2 [ 2195.947020][ T9141] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2196.187058][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2196.193924][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.276981][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2196.286673][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2196.306273][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2196.316819][T28606] 9pnet_fd: Insufficient options for proto=fd [ 2196.327076][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2196.335101][ T9141] usb 9-1: Product: syz [ 2196.342054][ T9141] usb 9-1: Manufacturer: syz [ 2196.348838][ T9141] usb 9-1: SerialNumber: syz [ 2196.365655][ T9141] usb 9-1: config 0 descriptor?? [ 2196.657526][T29230] 9pnet_fd: Insufficient options for proto=fd [ 2197.666457][T31196] incfs: Backing dir is not set, filesystem can't be mounted. [ 2197.674564][T31196] incfs: mount failed -2 [ 2198.099479][T32322] 9pnet_fd: Insufficient options for proto=fd [ 2198.406687][ T9141] usb 9-1: USB disconnect, device number 24 [ 2198.548546][ T760] incfs: Backing dir is not set, filesystem can't be mounted. [ 2198.573888][ T760] incfs: mount failed -2 [ 2201.038878][ T9141] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 2201.345952][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2201.352785][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2201.375857][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2201.385540][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2201.452596][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2201.463569][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.472038][ T9141] usb 9-1: Product: syz [ 2201.476339][ T9141] usb 9-1: Manufacturer: syz [ 2201.481074][ T9141] usb 9-1: SerialNumber: syz [ 2201.498310][ T9141] usb 9-1: config 0 descriptor?? [ 2201.600636][ T6340] overlayfs: failed to clone lowerpath [ 2203.182170][ T9277] 9pnet_fd: Insufficient options for proto=fd [ 2203.519354][ T703] usb 9-1: USB disconnect, device number 25 [ 2203.621639][T10105] 9pnet_fd: Insufficient options for proto=fd [ 2203.687127][T10109] incfs: ino conflict with backing FS 1 [ 2203.738875][T10144] 9pnet_fd: Insufficient options for proto=fd [ 2203.947148][T10633] 9pnet_fd: Insufficient options for proto=fd [ 2204.085465][T10817] 9pnet_fd: Insufficient options for proto=fd [ 2204.105716][T10937] 9pnet_fd: Insufficient options for proto=fd [ 2204.285440][T11372] 9pnet_fd: Insufficient options for proto=fd [ 2204.481386][T11790] 9pnet_fd: Insufficient options for proto=fd [ 2204.556208][T11895] incfs: Backing dir is not set, filesystem can't be mounted. [ 2204.563732][T11895] incfs: mount failed -2 [ 2205.206146][T13145] 9pnet_fd: Insufficient options for proto=fd [ 2205.920761][T14094] 9pnet_fd: Insufficient options for proto=fd [ 2207.965514][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13539'. [ 2208.154427][T17539] tmpfs: Bad value for 'nr_inodes' [ 2209.563757][T19087] 9pnet_fd: Insufficient options for proto=fd [ 2209.806687][T19240] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13573'. [ 2210.000613][T20024] 9pnet_fd: Insufficient options for proto=fd [ 2210.095059][T20234] 9pnet_fd: Insufficient options for proto=fd [ 2210.566295][T21264] 9pnet_fd: Insufficient options for proto=fd [ 2211.153825][ T9141] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 2211.483918][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2211.490559][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2211.500950][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2211.661040][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2211.775279][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2211.802811][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.902858][ T9141] usb 9-1: Product: syz [ 2211.920333][ T9141] usb 9-1: Manufacturer: syz [ 2211.936762][ T9141] usb 9-1: SerialNumber: syz [ 2211.957675][ T9141] usb 9-1: config 0 descriptor?? [ 2212.373789][T22930] 9pnet_fd: Insufficient options for proto=fd [ 2212.405049][T22932] 9pnet_fd: Insufficient options for proto=fd [ 2213.693813][ T703] usb 9-1: USB disconnect, device number 26 [ 2215.755227][ T9133] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 2215.987812][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2215.994210][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.015426][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2216.102646][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2216.122145][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2216.133877][T28499] overlayfs: failed to clone lowerpath [ 2216.140826][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.154266][ T9133] usb 9-1: Product: syz [ 2216.162521][ T9133] usb 9-1: Manufacturer: syz [ 2216.167402][ T9133] usb 9-1: SerialNumber: syz [ 2216.181661][ T9133] usb 9-1: config 0 descriptor?? [ 2216.503204][T29325] overlayfs: failed to clone lowerpath [ 2216.831869][T29852] overlayfs: failed to clone lowerpath [ 2217.376264][T30788] incfs: Backing dir is not set, filesystem can't be mounted. [ 2217.383870][T30788] incfs: mount failed -2 [ 2217.663962][T31495] overlayfs: failed to clone lowerpath [ 2217.987538][ T9133] usb 9-1: USB disconnect, device number 27 [ 2218.029712][T32132] overlayfs: failed to clone lowerpath [ 2218.113124][T32235] incfs: Backing dir is not set, filesystem can't be mounted. [ 2218.130889][T32235] incfs: mount failed -2 [ 2219.235675][ T1907] incfs: Backing dir is not set, filesystem can't be mounted. [ 2219.320005][ T1907] incfs: mount failed -2 [ 2222.993436][ T7174] incfs: ino conflict with backing FS 1 [ 2224.732876][T10060] incfs: Backing dir is not set, filesystem can't be mounted. [ 2224.754560][T10060] incfs: mount failed -2 [ 2226.804240][ T9141] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 2227.117609][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2227.126525][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.162213][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2227.172385][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2227.193045][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2227.254815][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.263162][ T9141] usb 9-1: Product: syz [ 2227.420433][ T9141] usb 9-1: Manufacturer: syz [ 2227.425271][ T9141] usb 9-1: SerialNumber: syz [ 2227.512604][ T9141] usb 9-1: config 0 descriptor?? [ 2227.682420][T15230] incfs: Backing dir is not set, filesystem can't be mounted. [ 2227.690053][T15230] incfs: mount failed -2 [ 2227.721559][ T703] usb 9-1: USB disconnect, device number 28 [ 2228.975990][ T9189] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2229.159853][ T9189] usb 9-1: Using ep0 maxpacket: 16 [ 2229.166296][ T9189] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.176865][ T9189] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2229.187565][ T9189] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2229.212640][ T9189] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2229.222593][ T9189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.234517][ T9189] usb 9-1: Product: syz [ 2229.238710][ T9189] usb 9-1: Manufacturer: syz [ 2229.250073][ T9189] usb 9-1: SerialNumber: syz [ 2229.255525][ T9189] usb 9-1: config 0 descriptor?? [ 2229.734899][T19142] incfs: Backing dir is not set, filesystem can't be mounted. [ 2229.742677][T19142] incfs: mount failed -2 [ 2231.342174][ T703] usb 9-1: USB disconnect, device number 29 [ 2247.609090][ T6936] incfs: Backing dir is not set, filesystem can't be mounted. [ 2247.645504][ T6936] incfs: mount failed -2 [ 2253.569453][ T9141] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2254.002135][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2254.008453][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2254.024708][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2254.051560][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2254.144075][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2254.234287][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.244301][T17829] overlayfs: failed to clone lowerpath [ 2254.304472][ T9141] usb 9-1: Product: syz [ 2254.308678][ T9141] usb 9-1: Manufacturer: syz [ 2254.313267][ T9141] usb 9-1: SerialNumber: syz [ 2254.320986][ T9141] usb 9-1: config 0 descriptor?? [ 2254.771206][T18754] overlayfs: failed to clone lowerpath [ 2255.297879][T19790] overlayfs: failed to clone lowerpath [ 2256.461749][ T9141] usb 9-1: USB disconnect, device number 30 [ 2258.634666][T24647] incfs: ino conflict with backing FS 1 [ 2260.869490][T27225] incfs: Backing dir is not set, filesystem can't be mounted. [ 2260.891424][T27225] incfs: mount failed -2 [ 2263.053549][T30557] incfs: ino conflict with backing FS 1 [ 2263.149688][T30757] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2263.161500][T30757] overlayfs: missing 'lowerdir' [ 2271.421375][T10592] incfs: Backing dir is not set, filesystem can't be mounted. [ 2271.431391][T10592] incfs: mount failed -2 [ 2272.890597][ T9141] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2273.080442][ T9141] usb 9-1: Using ep0 maxpacket: 16 [ 2273.168354][ T9141] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2273.263856][ T9141] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2273.755394][ T9141] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2273.789798][ T9141] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2273.819989][ T9141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.828817][ T9141] usb 9-1: Product: syz [ 2273.853720][ T9141] usb 9-1: Manufacturer: syz [ 2273.880288][ T9141] usb 9-1: SerialNumber: syz [ 2273.892077][ T9141] usb 9-1: config 0 descriptor?? [ 2275.472605][ T9141] usb 9-1: USB disconnect, device number 31 [ 2279.176696][ T703] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2279.389594][ T703] usb 9-1: Using ep0 maxpacket: 16 [ 2279.396148][ T703] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2279.416573][ T703] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2279.510539][ T703] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2279.599107][ T703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2279.607137][ T703] usb 9-1: Product: syz [ 2279.629081][ T703] usb 9-1: Manufacturer: syz [ 2279.644696][ T703] usb 9-1: SerialNumber: syz [ 2279.680302][ T703] usb 9-1: config 0 descriptor?? [ 2281.137464][ T703] usb 9-1: USB disconnect, device number 32 [ 2291.172710][ T4448] overlayfs: failed to clone lowerpath [ 2291.514290][ T4963] overlayfs: failed to clone lowerpath [ 2291.911055][ T5481] overlayfs: failed to clone lowerpath [ 2292.710683][ T6424] overlayfs: failed to clone lowerpath [ 2292.919115][ T6843] incfs: Backing dir is not set, filesystem can't be mounted. [ 2292.926780][ T6843] incfs: mount failed -2 [ 2298.161209][T12585] incfs: Backing dir is not set, filesystem can't be mounted. [ 2298.182364][T12585] incfs: mount failed -2 [ 2299.858065][T14677] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2299.867284][T14677] overlayfs: missing 'lowerdir' [ 2300.543208][T15298] incfs: ino conflict with backing FS 1 [ 2301.795240][T15960] incfs: Backing dir is not set, filesystem can't be mounted. [ 2301.802792][T15960] incfs: mount failed -2 [ 2302.732085][T17462] incfs: Backing dir is not set, filesystem can't be mounted. [ 2302.753114][T17462] incfs: mount failed -2 [ 2305.886192][T20637] incfs: ino conflict with backing FS 1 [ 2307.062020][T21081] incfs: Backing dir is not set, filesystem can't be mounted. [ 2307.104262][T21081] incfs: mount failed -2 [ 2308.807836][ T9133] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2309.121083][ T9133] usb 9-1: Using ep0 maxpacket: 16 [ 2309.127845][ T9133] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2309.138958][ T9133] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2309.148668][ T9133] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2309.171015][ T9133] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2309.187200][ T9133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.197838][ T9133] usb 9-1: Product: syz [ 2309.203933][ T9133] usb 9-1: Manufacturer: syz [ 2309.210808][ T9133] usb 9-1: SerialNumber: syz [ 2309.382204][ T9133] usb 9-1: config 0 descriptor?? [ 2309.801803][ T9133] usb 9-1: USB disconnect, device number 33 [ 2310.306011][T27159] incfs: Backing dir is not set, filesystem can't be mounted. [ 2310.315684][T27159] incfs: mount failed -2 [ 2312.978134][T29538] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2312.987442][T29538] overlayfs: missing 'lowerdir' [ 2320.643560][ T4727] incfs: Backing dir is not set, filesystem can't be mounted. [ 2320.652632][ T4727] incfs: mount failed -2 [ 2323.002564][ T7173] incfs: Backing dir is not set, filesystem can't be mounted. [ 2323.077014][ T7173] incfs: mount failed -2 [ 2324.212293][ T9400] 9pnet_fd: Insufficient options for proto=fd [ 2325.140311][T10054] incfs: Backing dir is not set, filesystem can't be mounted. [ 2325.187197][T10054] incfs: mount failed -2 [ 2326.052544][T10783] 9pnet_fd: Insufficient options for proto=fd [ 2326.876903][T12116] 9pnet_fd: Insufficient options for proto=fd [ 2328.057343][T12984] incfs: Backing dir is not set, filesystem can't be mounted. [ 2328.073930][T12984] incfs: mount failed -2 [ 2328.975192][T13311] incfs: ino conflict with backing FS 1 [ 2330.585550][T14883] incfs: Backing dir is not set, filesystem can't be mounted. [ 2330.594454][T14883] incfs: mount failed -2 [ 2331.392110][T16117] incfs: Backing dir is not set, filesystem can't be mounted. [ 2331.420295][T16117] incfs: mount failed -2 [ 2333.571009][T17043] incfs: Backing dir is not set, filesystem can't be mounted. [ 2333.579565][T17043] incfs: mount failed -2 [ 2333.692197][T17149] incfs: Backing dir is not set, filesystem can't be mounted. [ 2333.700607][T17149] incfs: mount failed -2 [ 2335.239015][T18386] incfs: ino conflict with backing FS 1 [ 2337.361053][T19627] incfs: Backing dir is not set, filesystem can't be mounted. [ 2337.378102][T19627] incfs: mount failed -2 [ 2337.927315][T20563] incfs: Backing dir is not set, filesystem can't be mounted. [ 2337.949113][T20563] incfs: mount failed -2 [ 2338.179314][T21077] incfs: Backing dir is not set, filesystem can't be mounted. [ 2338.187571][T21077] incfs: mount failed -2 [ 2338.207486][T21076] incfs: Backing dir is not set, filesystem can't be mounted. [ 2338.246995][T21076] incfs: mount failed -2 [ 2338.629604][T21699] overlayfs: failed to clone lowerpath [ 2339.129651][T22625] incfs: Backing dir is not set, filesystem can't be mounted. [ 2339.158066][T22625] incfs: mount failed -2 [ 2339.859383][T23761] incfs: Backing dir is not set, filesystem can't be mounted. [ 2339.902948][T23761] incfs: mount failed -2 [ 2340.562385][T25028] incfs: Backing dir is not set, filesystem can't be mounted. [ 2340.581103][T25028] incfs: mount failed -2 [ 2344.340757][T27767] incfs: Backing dir is not set, filesystem can't be mounted. [ 2344.343981][T27766] incfs: Backing dir is not set, filesystem can't be mounted. [ 2344.348350][T27767] incfs: mount failed -2 [ 2344.373609][T27766] incfs: mount failed -2 [ 2345.774802][T28197] incfs: Backing dir is not set, filesystem can't be mounted. [ 2345.782491][T28197] incfs: mount failed -2 [ 2345.878748][T28393] incfs: Backing dir is not set, filesystem can't be mounted. [ 2345.886555][T28393] incfs: mount failed -2 [ 2348.376430][T30979] incfs: Backing dir is not set, filesystem can't be mounted. [ 2348.383970][T30979] incfs: mount failed -2 [ 2348.594322][T31411] incfs: Backing dir is not set, filesystem can't be mounted. [ 2348.623002][T31411] incfs: mount failed -2 [ 2351.205085][ T1368] incfs: Backing dir is not set, filesystem can't be mounted. [ 2351.253077][ T1368] incfs: mount failed -2 [ 2351.774222][ T9133] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2352.014036][ T9133] usb 9-1: device descriptor read/64, error -71 [ 2352.384220][ T9133] usb 9-1: device descriptor read/64, error -71 [ 2352.699286][ T9133] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2352.945121][ T9133] usb 9-1: device descriptor read/64, error -71 [ 2353.229918][ T9133] usb 9-1: device descriptor read/64, error -71 [ 2353.427733][ T9133] usb usb9-port1: attempt power cycle [ 2354.178113][ T6453] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2354.193429][ T6453] overlayfs: missing 'lowerdir' [ 2355.212252][ T8003] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2355.221285][ T8003] overlayfs: missing 'lowerdir' [ 2356.123316][ T8317] incfs: ino conflict with backing FS 1 [ 2359.228969][ T9263] incfs: Backing dir is not set, filesystem can't be mounted. [ 2359.238601][ T9263] incfs: mount failed -2 [ 2360.633950][ T9886] incfs: Backing dir is not set, filesystem can't be mounted. [ 2360.641652][ T9886] incfs: mount failed -2 [ 2361.565775][ T28] audit: type=1400 audit(2000003240.060:3571): avc: denied { mount } for pid=11448 comm="syz.1.16008" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2363.552192][T12603] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2363.616227][T12603] overlayfs: missing 'lowerdir' [ 2365.255076][T14809] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2365.270641][T14809] overlayfs: missing 'lowerdir' [ 2368.131361][T16683] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2368.178466][T16683] overlayfs: missing 'lowerdir' [ 2368.744397][T17803] incfs: Backing dir is not set, filesystem can't be mounted. [ 2368.752172][T17803] incfs: mount failed -2 [ 2372.782339][T24818] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2373.085195][T24818] usb 9-1: Using ep0 maxpacket: 16 [ 2373.189254][T24818] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2373.222111][T24818] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2373.281071][T24818] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2373.307615][T24818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.333353][T24818] usb 9-1: Product: syz [ 2373.337555][T24818] usb 9-1: Manufacturer: syz [ 2373.374452][T24818] usb 9-1: SerialNumber: syz [ 2373.438488][T24818] usb 9-1: config 0 descriptor?? [ 2375.168158][T24818] usb 9-1: USB disconnect, device number 37 [ 2376.137818][T27291] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2376.146758][T27291] overlayfs: missing 'lowerdir' [ 2376.859380][T28017] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2376.868286][T28017] overlayfs: missing 'lowerdir' [ 2377.380071][T28942] incfs: Backing dir is not set, filesystem can't be mounted. [ 2377.388693][T28942] incfs: mount failed -2 [ 2379.701089][T30100] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2379.710062][T30100] overlayfs: missing 'lowerdir' [ 2381.328085][T31470] incfs: Backing dir is not set, filesystem can't be mounted. [ 2381.335978][T31470] incfs: mount failed -2 [ 2383.162843][T32357] 9pnet_fd: Insufficient options for proto=fd [ 2385.743126][ T992] 9pnet_fd: Insufficient options for proto=fd [ 2388.936767][ T9193] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2389.161180][ T9193] usb 9-1: Using ep0 maxpacket: 16 [ 2389.169905][ T9193] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2389.257248][ T9193] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2389.280375][ T9193] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2389.290429][ T9193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2389.316714][ T9193] usb 9-1: Product: syz [ 2389.321027][ T9193] usb 9-1: Manufacturer: syz [ 2389.325622][ T9193] usb 9-1: SerialNumber: syz [ 2389.397103][ T9193] usb 9-1: config 0 descriptor?? [ 2389.721862][ T4863] 9pnet_fd: Insufficient options for proto=fd [ 2390.983039][ T7002] incfs: Backing dir is not set, filesystem can't be mounted. [ 2390.990747][ T7002] incfs: mount failed -2 [ 2391.368055][T24818] usb 9-1: USB disconnect, device number 38 [ 2391.484350][ T7987] incfs: Backing dir is not set, filesystem can't be mounted. [ 2391.522821][ T7987] incfs: mount failed -2 [ 2391.710241][ T8301] incfs: Backing dir is not set, filesystem can't be mounted. [ 2391.717970][ T8301] incfs: mount failed -2 [ 2392.791423][T10376] incfs: Backing dir is not set, filesystem can't be mounted. [ 2392.799479][T10376] incfs: mount failed -2 [ 2392.806760][T10376] overlayfs: failed to clone lowerpath [ 2392.909439][T10381] incfs: ino conflict with backing FS 1 [ 2394.102606][T11017] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2394.111597][T11017] overlayfs: missing 'lowerdir' [ 2394.175915][T11293] incfs: Backing dir is not set, filesystem can't be mounted. [ 2394.186989][T11293] incfs: mount failed -2 [ 2394.192856][T11293] overlayfs: failed to clone lowerpath [ 2394.461684][T11751] incfs: ino conflict with backing FS 1 [ 2394.542717][T11959] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2394.635077][T12064] incfs: Backing dir is not set, filesystem can't be mounted. [ 2394.642902][T12064] incfs: mount failed -2 [ 2394.647988][T12064] overlayfs: failed to clone lowerpath [ 2394.653811][T11959] overlayfs: missing 'lowerdir' [ 2395.116673][T12277] incfs: Backing dir is not set, filesystem can't be mounted. [ 2395.124215][T12277] incfs: mount failed -2 [ 2395.434747][T13119] 9pnet_fd: Insufficient options for proto=fd [ 2395.481710][T13437] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2395.501071][T13437] overlayfs: missing 'lowerdir' [ 2396.071817][T14273] 9pnet_fd: Insufficient options for proto=fd [ 2396.741638][T15309] 9pnet_fd: Insufficient options for proto=fd [ 2397.360556][T16456] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2397.369588][T16456] overlayfs: missing 'lowerdir' [ 2398.098733][T17386] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2398.107718][T17386] overlayfs: missing 'lowerdir' [ 2398.919646][T18956] incfs: Backing dir is not set, filesystem can't be mounted. [ 2398.929313][T18956] incfs: mount failed -2 [ 2401.083528][T21522] incfs: ino conflict with backing FS 1 [ 2402.380807][T22966] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2402.389879][T22966] overlayfs: missing 'lowerdir' [ 2402.933078][T23386] incfs: ino conflict with backing FS 1 [ 2404.111830][T23912] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2404.120890][T23912] overlayfs: missing 'lowerdir' [ 2404.782741][T24833] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2404.791694][T24833] overlayfs: missing 'lowerdir' [ 2405.599249][T26168] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2405.608179][T26168] overlayfs: missing 'lowerdir' [ 2406.907612][T27920] incfs: Backing dir is not set, filesystem can't be mounted. [ 2406.915282][T27920] incfs: mount failed -2 [ 2410.341421][T30402] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2410.350381][T30402] overlayfs: missing 'lowerdir' [ 2411.553246][T32151] overlayfs: failed to clone lowerpath [ 2411.777556][T32258] incfs: Backing dir is not set, filesystem can't be mounted. [ 2411.790216][T32258] incfs: mount failed -2 [ 2412.020578][T32687] incfs: ino conflict with backing FS 1 [ 2413.302241][ T9193] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2413.561930][ T9193] usb 9-1: Using ep0 maxpacket: 16 [ 2413.568375][ T9193] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2413.589320][ T9193] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2413.628825][ T9193] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2413.638369][ T9193] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.646608][ T9193] usb 9-1: Product: syz [ 2413.650983][ T9193] usb 9-1: Manufacturer: syz [ 2413.655827][ T9193] usb 9-1: SerialNumber: syz [ 2413.664409][ T9193] usb 9-1: config 0 descriptor?? [ 2414.290058][ T4555] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2414.299019][ T4555] overlayfs: missing 'lowerdir' [ 2414.427216][ T4860] overlayfs: failed to clone lowerpath [ 2414.603127][ T5175] overlayfs: failed to clone lowerpath [ 2414.663076][ T5180] overlayfs: failed to clone lowerpath [ 2414.788520][ T5387] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2414.797483][ T5387] overlayfs: missing 'lowerdir' [ 2415.404532][ T6532] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2415.413495][ T6532] overlayfs: missing 'lowerdir' [ 2416.058823][T24818] usb 9-1: USB disconnect, device number 39 [ 2417.337318][ T8816] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2417.346252][ T8816] overlayfs: missing 'lowerdir' [ 2419.085177][T10169] incfs: ino conflict with backing FS 1 [ 2419.302440][T10585] incfs: Backing dir is not set, filesystem can't be mounted. [ 2419.379070][T10585] incfs: mount failed -2 [ 2419.525873][T10798] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2419.534827][T10798] overlayfs: missing 'lowerdir' [ 2419.784865][T11014] overlayfs: failed to clone lowerpath [ 2420.165056][T11739] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2420.174371][T11739] overlayfs: missing 'lowerdir' [ 2420.635051][T12166] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2420.644017][T12166] overlayfs: missing 'lowerdir' [ 2421.221315][T12648] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2421.230211][T12648] overlayfs: missing 'lowerdir' [ 2421.697257][T13010] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2421.706724][T13010] overlayfs: missing 'lowerdir' [ 2422.827027][T14096] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2422.835978][T14096] overlayfs: missing 'lowerdir' [ 2424.901746][T17164] 9pnet_fd: Insufficient options for proto=fd [ 2425.539163][T18188] 9pnet_fd: Insufficient options for proto=fd [ 2426.257382][T18908] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2426.266338][T18908] overlayfs: missing 'lowerdir' [ 2426.494782][T19426] 9pnet_fd: Insufficient options for proto=fd [ 2426.692206][T19430] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2426.701350][T19430] overlayfs: missing 'lowerdir' [ 2427.820891][T20472] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2427.829802][T20472] overlayfs: missing 'lowerdir' [ 2428.200185][T20988] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2428.209128][T20988] overlayfs: missing 'lowerdir' [ 2428.839185][T21915] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2428.848089][T21915] overlayfs: missing 'lowerdir' [ 2428.874930][T22096] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2428.883886][T22096] overlayfs: missing 'lowerdir' [ 2429.623788][T23058] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2429.632716][T23058] overlayfs: missing 'lowerdir' [ 2429.947570][T23681] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2429.958692][T23681] overlayfs: missing 'lowerdir' [ 2431.871514][T26870] incfs: ino conflict with backing FS 1 [ 2432.415481][T27796] overlayfs: missing 'lowerdir' [ 2434.074233][T30580] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2434.168237][T30580] overlayfs: missing 'lowerdir' [ 2436.829994][ T709] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2436.853537][ T709] overlayfs: missing 'lowerdir' [ 2437.469522][ T1235] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2437.478628][ T1235] overlayfs: missing 'lowerdir' [ 2438.100136][ T1752] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2438.125499][ T1752] overlayfs: missing 'lowerdir' [ 2438.319568][ T1865] incfs: ino conflict with backing FS 1 [ 2438.707516][ T2589] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2438.731421][ T2589] overlayfs: missing 'lowerdir' [ 2438.851238][ T2898] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2438.860169][ T2898] overlayfs: missing 'lowerdir' [ 2440.891153][ T6305] incfs: ino conflict with backing FS 1 [ 2443.547633][ T28] audit: type=1400 audit(2000003322.057:3572): avc: denied { getopt } for pid=8497 comm="syz.4.17231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2444.293881][ T8873] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2444.302819][ T8873] overlayfs: missing 'lowerdir' [ 2446.495863][T10741] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2446.504893][T10741] overlayfs: missing 'lowerdir' [ 2447.254274][T11750] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2447.263315][T11750] overlayfs: missing 'lowerdir' [ 2448.203580][T13118] incfs: Backing dir is not set, filesystem can't be mounted. [ 2448.211179][T13118] incfs: mount failed -2 [ 2448.215920][T13118] overlayfs: failed to clone lowerpath [ 2454.401770][T21596] overlayfs: failed to clone lowerpath [ 2456.107598][T24600] incfs: ino conflict with backing FS 1 [ 2458.358489][T28281] overlayfs: failed to clone lowerpath [ 2459.514496][T30462] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2459.530586][T30462] overlayfs: missing 'lowerdir' [ 2460.192481][T31493] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2460.201587][T31493] overlayfs: missing 'lowerdir' [ 2460.719262][T32211] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2460.728214][T32211] overlayfs: missing 'lowerdir' [ 2460.945045][T32483] incfs: ino conflict with backing FS 1 [ 2461.421051][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.429311][ T676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.437191][ T676] device bridge_slave_0 entered promiscuous mode [ 2461.444519][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.451700][ T676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.461067][ T676] device bridge_slave_1 entered promiscuous mode [ 2461.522408][ T788] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2461.531352][ T788] overlayfs: missing 'lowerdir' [ 2461.615826][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.622937][ T676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2461.630225][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.637297][ T676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2461.681416][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2461.699034][T32515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2461.709105][T32515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2461.759086][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2461.781335][T32515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2461.788449][T32515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2461.808310][ T1066] overlayfs: failed to clone lowerpath [ 2461.849900][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2461.858958][T32515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2461.866043][T32515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2461.887941][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2461.896678][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2461.914200][ T676] device veth0_vlan entered promiscuous mode [ 2461.921059][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2461.930770][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2461.941040][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2461.949597][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2461.968397][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2461.978444][T12847] device gretap0 left promiscuous mode [ 2461.984630][T12847] bridge0: port 3(gretap0) entered disabled state [ 2462.000375][ T676] device veth1_macvtap entered promiscuous mode [ 2462.011244][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2462.026819][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2462.107388][ T1409] incfs: Backing dir is not set, filesystem can't be mounted. [ 2462.134033][T12847] device bridge_slave_1 left promiscuous mode [ 2462.214699][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.238370][T12847] device bridge_slave_0 left promiscuous mode [ 2462.272032][ T1413] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2462.281047][ T1413] overlayfs: missing 'lowerdir' [ 2462.340073][ T1409] incfs: mount failed -2 [ 2462.394126][T12847] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.698677][ T1415] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2462.711472][ T1415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2462.832349][ C0] ------------[ cut here ]------------ [ 2462.837845][ C0] refcount_t: addition on 0; use-after-free. [ 2462.843989][ C0] WARNING: CPU: 0 PID: 1406 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 2462.853432][ C0] Modules linked in: [ 2462.857360][ C0] CPU: 0 PID: 1406 Comm: syz.8.17548 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 2462.868775][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2462.878869][ C0] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 2462.885061][ C0] Code: 05 01 48 c7 c7 e0 a1 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 20 a1 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 80 a1 a9 [ 2462.904697][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2462.910823][ C0] RAX: f964128211dede00 RBX: 0000000000000002 RCX: ffff88812de55100 [ 2462.918912][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2462.926933][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000eb9 [ 2462.934960][ C0] R10: fffff52000000eb9 R11: 1ffff92000000eb8 R12: ffffc90000007ba0 [ 2462.942979][ C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8881135b3a00 [ 2462.950956][ C0] FS: 00007fc23b5ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2462.959954][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2462.966589][ C0] CR2: 0000000000000000 CR3: 0000000139537000 CR4: 00000000003506b0 [ 2462.974643][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2462.982643][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2462.990630][ C0] Call Trace: [ 2462.993953][ C0] [ 2462.996792][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 2463.001804][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2463.007190][ C0] ? __copy_skb_header+0x49f/0x630 [ 2463.012346][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 2463.017532][ C0] ? __skb_clone+0x47a/0x790 [ 2463.022112][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2463.027853][ C0] ? skb_clone+0x228/0x380 [ 2463.032343][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2463.037288][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2463.042520][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.047993][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.054201][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.059662][ C0] call_timer_fn+0x46/0x2a0 [ 2463.064187][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.069653][ C0] __run_timers+0x639/0x9a0 [ 2463.074203][ C0] ? calc_index+0x200/0x200 [ 2463.078707][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2463.083923][ C0] run_timer_softirq+0x6a/0xf0 [ 2463.088694][ C0] handle_softirqs+0x1d7/0x600 [ 2463.093488][ C0] __irq_exit_rcu+0x52/0xf0 [ 2463.097989][ C0] irq_exit_rcu+0x9/0x10 [ 2463.102243][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2463.107876][ C0] [ 2463.110790][ C0] [ 2463.113736][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.119717][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 2463.125277][ C0] Code: 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 2463.144918][ C0] RSP: 0018:ffffc9000217fa28 EFLAGS: 00000202 [ 2463.150969][ C0] RAX: ffffffff83dcf701 RBX: 0000000000000038 RCX: ffffffff83dcf7c9 [ 2463.158991][ C0] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000217fac0 [ 2463.167004][ C0] RBP: ffffc9000217fa50 R08: dffffc0000000000 R09: ffffc9000217fb20 [ 2463.175018][ C0] R10: fffff5200042ff74 R11: 1ffff9200042ff64 R12: 0000000000000002 [ 2463.183005][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000217fac0 [ 2463.190966][ C0] ? ___sys_recvmsg+0x51/0x510 [ 2463.195765][ C0] ? ___sys_recvmsg+0x119/0x510 [ 2463.200629][ C0] ? memset+0x23/0x40 [ 2463.204629][ C0] ___sys_recvmsg+0x119/0x510 [ 2463.209312][ C0] ? __sys_recvmsg+0x270/0x270 [ 2463.214110][ C0] ? folio_batch_move_lru+0x38c/0x470 [ 2463.219514][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.225686][ C0] ? do_recvmmsg+0x52a/0x7a0 [ 2463.230279][ C0] do_recvmmsg+0x359/0x7a0 [ 2463.234723][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2463.239584][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 2463.244646][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2463.250238][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2463.256341][ C0] x64_sys_call+0x3e7/0x9a0 [ 2463.260852][ C0] do_syscall_64+0x4c/0xa0 [ 2463.265279][ C0] ? clear_bhb_loop+0x30/0x80 [ 2463.269958][ C0] ? clear_bhb_loop+0x30/0x80 [ 2463.274664][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2463.280574][ C0] RIP: 0033:0x7fc23a78e929 [ 2463.285041][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2463.304697][ C0] RSP: 002b:00007fc23b5ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2463.313145][ C0] RAX: ffffffffffffffda RBX: 00007fc23a9b6080 RCX: 00007fc23a78e929 [ 2463.321119][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 2463.329109][ C0] RBP: 00007fc23a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2463.337108][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2463.345100][ C0] R13: 0000000000000001 R14: 00007fc23a9b6080 R15: 00007ffda500cf38 [ 2463.353123][ C0] [ 2463.356127][ C0] ---[ end trace 0000000000000000 ]--- [ 2463.361569][ C0] ------------[ cut here ]------------ [ 2463.367021][ C0] refcount_t: underflow; use-after-free. [ 2463.372740][ C0] WARNING: CPU: 0 PID: 1406 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 2463.382163][ C0] Modules linked in: [ 2463.386068][ C0] CPU: 0 PID: 1406 Comm: syz.8.17548 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 2463.397444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2463.407514][ C0] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 2463.413697][ C0] Code: 05 01 48 c7 c7 20 a1 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 80 a1 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 c0 a0 a9 [ 2463.433408][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2463.439489][ C0] RAX: f964128211dede00 RBX: 0000000000000003 RCX: ffff88812de55100 [ 2463.447501][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2463.455497][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: fffff52000000edd [ 2463.463505][ C0] R10: fffff52000000edd R11: 1ffff92000000edc R12: 00000000c0000000 [ 2463.471496][ C0] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8881135b3a00 [ 2463.479487][ C0] FS: 00007fc23b5ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2463.488434][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2463.495047][ C0] CR2: 0000000000000000 CR3: 0000000139537000 CR4: 00000000003506b0 [ 2463.503056][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2463.511014][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2463.519014][ C0] Call Trace: [ 2463.522303][ C0] [ 2463.525130][ C0] tipc_crypto_xmit+0x195e/0x2220 [ 2463.530141][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2463.535543][ C0] ? __copy_skb_header+0x49f/0x630 [ 2463.540673][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 2463.545882][ C0] ? __skb_clone+0x47a/0x790 [ 2463.550481][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2463.556261][ C0] ? skb_clone+0x228/0x380 [ 2463.560679][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2463.565639][ C0] ? irqtime_account_irq+0xc4/0x240 [ 2463.570857][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.576346][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.582521][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.587971][ C0] call_timer_fn+0x46/0x2a0 [ 2463.592498][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2463.597961][ C0] __run_timers+0x639/0x9a0 [ 2463.602486][ C0] ? calc_index+0x200/0x200 [ 2463.607027][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2463.612285][ C0] run_timer_softirq+0x6a/0xf0 [ 2463.617060][ C0] handle_softirqs+0x1d7/0x600 [ 2463.621810][ C0] __irq_exit_rcu+0x52/0xf0 [ 2463.626328][ C0] irq_exit_rcu+0x9/0x10 [ 2463.630572][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2463.636246][ C0] [ 2463.639177][ C0] [ 2463.642125][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.648133][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 2463.653705][ C0] Code: 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 2463.673344][ C0] RSP: 0018:ffffc9000217fa28 EFLAGS: 00000202 [ 2463.679402][ C0] RAX: ffffffff83dcf701 RBX: 0000000000000038 RCX: ffffffff83dcf7c9 [ 2463.687408][ C0] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000217fac0 [ 2463.695413][ C0] RBP: ffffc9000217fa50 R08: dffffc0000000000 R09: ffffc9000217fb20 [ 2463.703425][ C0] R10: fffff5200042ff74 R11: 1ffff9200042ff64 R12: 0000000000000002 [ 2463.711415][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000217fac0 [ 2463.719422][ C0] ? ___sys_recvmsg+0x51/0x510 [ 2463.724224][ C0] ? ___sys_recvmsg+0x119/0x510 [ 2463.729063][ C0] ? memset+0x23/0x40 [ 2463.733053][ C0] ___sys_recvmsg+0x119/0x510 [ 2463.737731][ C0] ? __sys_recvmsg+0x270/0x270 [ 2463.742518][ C0] ? folio_batch_move_lru+0x38c/0x470 [ 2463.747895][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2463.754063][ C0] ? do_recvmmsg+0x52a/0x7a0 [ 2463.758673][ C0] do_recvmmsg+0x359/0x7a0 [ 2463.763114][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2463.767967][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 2463.772999][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2463.778544][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2463.784637][ C0] x64_sys_call+0x3e7/0x9a0 [ 2463.789142][ C0] do_syscall_64+0x4c/0xa0 [ 2463.793564][ C0] ? clear_bhb_loop+0x30/0x80 [ 2463.798247][ C0] ? clear_bhb_loop+0x30/0x80 [ 2463.802971][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2463.808867][ C0] RIP: 0033:0x7fc23a78e929 [ 2463.813296][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2463.832937][ C0] RSP: 002b:00007fc23b5ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2463.841335][ C0] RAX: ffffffffffffffda RBX: 00007fc23a9b6080 RCX: 00007fc23a78e929 [ 2463.849332][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 2463.857319][ C0] RBP: 00007fc23a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2463.865338][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2463.873340][ C0] R13: 0000000000000001 R14: 00007fc23a9b6080 R15: 00007ffda500cf38 [ 2463.881306][ C0] [ 2463.884359][ C0] ---[ end trace 0000000000000000 ]--- [ 2463.890078][ C0] ------------[ cut here ]------------ [ 2463.895540][ C0] refcount_t: saturated; leaking memory. [ 2463.901208][ C0] WARNING: CPU: 0 PID: 1406 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 2463.910617][ C0] Modules linked in: [ 2463.914523][ C0] CPU: 0 PID: 1406 Comm: syz.8.17548 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 2463.925944][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2463.936060][ C0] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 2463.943903][ C0] Code: 05 01 48 c7 c7 c0 a0 a9 85 e8 e4 fa dd fe 0f 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 c0 a0 a9 85 e8 c8 fa dd fe <0f> 0b e9 6c ff ff ff e8 fc b4 0c ff c6 05 5f ab 0b 05 01 48 c7 c7 [ 2463.963541][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00010246 [ 2463.969594][ C0] RAX: f964128211dede00 RBX: 0000000000000001 RCX: ffff88812de55100 [ 2463.977596][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 2463.985601][ C0] RBP: ffffc900000079f0 R08: dffffc0000000000 R09: ffffed103ee04eb4 [ 2463.993614][ C0] R10: ffffed103ee04eb4 R11: 1ffff1103ee04eb3 R12: ffffc90000007ba0 [ 2464.001588][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8881135b3a00 [ 2464.009584][ C0] FS: 00007fc23b5ca6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 2464.018556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2464.025165][ C0] CR2: 0000000000000000 CR3: 0000000139537000 CR4: 00000000003506b0 [ 2464.033159][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2464.041130][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2464.049118][ C0] Call Trace: [ 2464.052414][ C0] [ 2464.055241][ C0] tipc_crypto_xmit+0x1822/0x2220 [ 2464.060248][ C0] ? __irq_exit_rcu+0x52/0xf0 [ 2464.064934][ C0] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 2464.070307][ C0] ? __copy_skb_header+0x49f/0x630 [ 2464.075450][ C0] tipc_bearer_xmit_skb+0x226/0x380 [ 2464.080657][ C0] ? __skb_clone+0x47a/0x790 [ 2464.085262][ C0] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 2464.090987][ C0] ? skb_clone+0x228/0x380 [ 2464.095429][ C0] tipc_disc_timeout+0x6a2/0x830 [ 2464.100368][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2464.105837][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2464.111299][ C0] call_timer_fn+0x46/0x2a0 [ 2464.115830][ C0] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 2464.121293][ C0] __run_timers+0x639/0x9a0 [ 2464.125813][ C0] ? calc_index+0x200/0x200 [ 2464.130323][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 2464.135554][ C0] run_timer_softirq+0x6a/0xf0 [ 2464.140322][ C0] handle_softirqs+0x1d7/0x600 [ 2464.145094][ C0] __irq_exit_rcu+0x52/0xf0 [ 2464.149597][ C0] irq_exit_rcu+0x9/0x10 [ 2464.153867][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2464.159504][ C0] [ 2464.162448][ C0] [ 2464.165372][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2464.171338][ C0] RIP: 0010:kasan_check_range+0xc/0x290 [ 2464.176907][ C0] Code: 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 bf f3 05 3b b0 01 48 85 f6 0f 84 a9 01 00 00 55 <48> 89 e5 41 57 41 56 53 49 89 f8 49 01 f0 0f 82 58 02 00 00 49 89 [ 2464.196544][ C0] RSP: 0018:ffffc9000217fa28 EFLAGS: 00000202 [ 2464.202645][ C0] RAX: ffffffff83dcf701 RBX: 0000000000000038 RCX: ffffffff83dcf7c9 [ 2464.210621][ C0] RDX: 0000000000000001 RSI: 0000000000000038 RDI: ffffc9000217fac0 [ 2464.218638][ C0] RBP: ffffc9000217fa50 R08: dffffc0000000000 R09: ffffc9000217fb20 [ 2464.226651][ C0] R10: fffff5200042ff74 R11: 1ffff9200042ff64 R12: 0000000000000002 [ 2464.234635][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000217fac0 [ 2464.242640][ C0] ? ___sys_recvmsg+0x51/0x510 [ 2464.247426][ C0] ? ___sys_recvmsg+0x119/0x510 [ 2464.252296][ C0] ? memset+0x23/0x40 [ 2464.256285][ C0] ___sys_recvmsg+0x119/0x510 [ 2464.260952][ C0] ? __sys_recvmsg+0x270/0x270 [ 2464.265755][ C0] ? folio_batch_move_lru+0x38c/0x470 [ 2464.271141][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2464.277313][ C0] ? do_recvmmsg+0x52a/0x7a0 [ 2464.281908][ C0] do_recvmmsg+0x359/0x7a0 [ 2464.286354][ C0] ? __sys_recvmmsg+0x280/0x280 [ 2464.291205][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 2464.296235][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 2464.301784][ C0] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2464.307881][ C0] x64_sys_call+0x3e7/0x9a0 [ 2464.312403][ C0] do_syscall_64+0x4c/0xa0 [ 2464.316800][ C0] ? clear_bhb_loop+0x30/0x80 [ 2464.321459][ C0] ? clear_bhb_loop+0x30/0x80 [ 2464.326169][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2464.332089][ C0] RIP: 0033:0x7fc23a78e929 [ 2464.336492][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2464.356144][ C0] RSP: 002b:00007fc23b5ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2464.364600][ C0] RAX: ffffffffffffffda RBX: 00007fc23a9b6080 RCX: 00007fc23a78e929 [ 2464.372585][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 2464.380560][ C0] RBP: 00007fc23a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 2464.388560][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2464.396548][ C0] R13: 0000000000000001 R14: 00007fc23a9b6080 R15: 00007ffda500cf38 [ 2464.404551][ C0] [ 2464.407567][ C0] ---[ end trace 0000000000000000 ]--- [ 2464.471538][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.479900][ T1597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2464.490095][ T1597] device bridge_slave_0 entered promiscuous mode [ 2464.547266][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 2464.562312][ T1597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2464.577426][ T1597] device bridge_slave_1 entered promiscuous mode [ 2464.687190][T12847] tipc: Disabling bearer [ 2464.692844][T12847] tipc: Left network mode [ 2464.873047][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2464.882033][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2464.927014][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2464.947372][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2464.971931][ T9189] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2464.977671][T32515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2464.986493][T32515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2465.029534][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2465.059827][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2465.092185][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2465.103241][T32515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2465.110287][T32515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2465.148081][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2465.161903][ T9189] usb 2-1: Using ep0 maxpacket: 16 [ 2465.177291][ T9189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2465.192032][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2465.200442][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2465.231896][ T9189] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 2465.253995][ T9189] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2465.288509][ T9189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2465.298246][ T9189] usb 2-1: Product: syz [ 2465.302662][ T9189] usb 2-1: Manufacturer: syz [ 2465.307375][ T9189] usb 2-1: SerialNumber: syz [ 2465.317761][ T9189] usb 2-1: config 0 descriptor?? [ 2465.327843][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2465.338901][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2465.346952][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2465.356605][ T1597] device veth0_vlan entered promiscuous mode [ 2465.370345][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2465.380845][ T1597] device veth1_macvtap entered promiscuous mode [ 2465.392697][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2465.412212][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2466.009608][ T2456] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2466.018563][ T2456] overlayfs: missing 'lowerdir' [ 2466.035908][T12847] device bridge_slave_1 left promiscuous mode [ 2466.049380][T12847] bridge0: port 2(bridge_slave_1) entered disabled state [ 2466.299442][ T2463] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2466.308391][ T2463] overlayfs: missing 'lowerdir' [ 2466.548592][T13495] device syz_tun left promiscuous mode [ 2466.555129][T13495] bridge0: port 1(syz_tun) entered disabled state [ 2466.635505][ T2576] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2466.644510][ T2576] overlayfs: missing 'lowerdir' [ 2466.825692][T12847] tipc: Disabling bearer [ 2466.831255][T12847] tipc: Left network mode [ 2466.856228][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 2466.863450][ T2574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2467.361558][ T2582] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2467.377516][ T2582] overlayfs: missing 'lowerdir' [ 2467.385443][ T2574] device bridge_slave_0 entered promiscuous mode [ 2467.402126][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 2467.409424][ T2574] bridge0: port 2(bridge_slave_1) entered disabled state [ 2467.418042][ T2574] device bridge_slave_1 entered promiscuous mode [ 2467.483095][ T9925] usb 2-1: USB disconnect, device number 8 [ 2467.636116][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2467.644414][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2467.672267][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2467.684750][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2467.694134][T32515] bridge0: port 1(bridge_slave_0) entered blocking state [ 2467.701182][T32515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2467.710444][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2467.726243][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2467.789449][ T2796] incfs: Backing dir is not set, filesystem can't be mounted. [ 2467.797165][ T2796] incfs: mount failed -2 [ 2467.809853][ T2797] incfs: ino conflict with backing FS 1 [ 2467.816367][ T2797] overlayfs: missing 'lowerdir' [ 2467.836990][ T2797] incfs: iterate_incfs_dir / -22 [ 2468.442665][T32515] bridge0: port 2(bridge_slave_1) entered blocking state [ 2468.449776][T32515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2468.542853][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2468.758932][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2468.770207][T32515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2468.790838][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2468.799147][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2468.809166][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2468.818098][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2468.831740][ T2574] device veth0_vlan entered promiscuous mode [ 2468.838525][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2468.846824][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2468.868565][ T2574] device veth1_macvtap entered promiscuous mode [ 2468.875484][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2468.883376][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2468.890948][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2468.899442][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2468.908598][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2468.919061][ T2905] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2468.927993][ T2905] overlayfs: missing 'lowerdir' [ 2468.943951][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2468.952635][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2468.961941][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2468.970373][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2469.686737][T12847] ================================================================== [ 2469.694849][T12847] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 2469.702580][T12847] Read of size 4 at addr ffff8881073a238c by task kworker/u4:0/12847 [ 2469.710648][T12847] [ 2469.712967][T12847] CPU: 0 PID: 12847 Comm: kworker/u4:0 Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 2469.724945][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2469.734995][T12847] Workqueue: netns cleanup_net [ 2469.739765][T12847] Call Trace: [ 2469.743025][T12847] [ 2469.745953][T12847] __dump_stack+0x21/0x24 [ 2469.750268][T12847] dump_stack_lvl+0xee/0x150 [ 2469.754839][T12847] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2469.759844][T12847] ? __cfi__printk+0x8/0x8 [ 2469.764239][T12847] ? tcp_metrics_flush_all+0xd3/0x210 [ 2469.769589][T12847] print_address_description+0x71/0x210 [ 2469.775116][T12847] print_report+0x4a/0x60 [ 2469.779426][T12847] kasan_report+0x122/0x150 [ 2469.783910][T12847] ? tcp_metrics_flush_all+0xd3/0x210 [ 2469.789262][T12847] kasan_check_range+0x280/0x290 [ 2469.794192][T12847] __kasan_check_read+0x11/0x20 [ 2469.799029][T12847] tcp_metrics_flush_all+0xd3/0x210 [ 2469.804219][T12847] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 2469.810536][T12847] tcp_net_metrics_exit_batch+0x10/0x20 [ 2469.816074][T12847] cleanup_net+0x62d/0xb00 [ 2469.820477][T12847] ? __cfi_cleanup_net+0x10/0x10 [ 2469.825393][T12847] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 2469.830749][T12847] process_one_work+0x71f/0xc40 [ 2469.835579][T12847] worker_thread+0xa29/0x11f0 [ 2469.840237][T12847] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 2469.845682][T12847] kthread+0x281/0x320 [ 2469.849732][T12847] ? __cfi_worker_thread+0x10/0x10 [ 2469.854818][T12847] ? __cfi_kthread+0x10/0x10 [ 2469.859385][T12847] ret_from_fork+0x1f/0x30 [ 2469.863782][T12847] [ 2469.866779][T12847] [ 2469.869089][T12847] Allocated by task 2115: [ 2469.873387][T12847] kasan_set_track+0x4b/0x70 [ 2469.877954][T12847] kasan_save_alloc_info+0x25/0x30 [ 2469.883047][T12847] __kasan_slab_alloc+0x72/0x80 [ 2469.887875][T12847] slab_post_alloc_hook+0x4f/0x2d0 [ 2469.892965][T12847] kmem_cache_alloc+0x16e/0x330 [ 2469.897803][T12847] copy_net_ns+0x145/0x5c0 [ 2469.902196][T12847] create_new_namespaces+0x3a2/0x660 [ 2469.907463][T12847] unshare_nsproxy_namespaces+0x120/0x170 [ 2469.913166][T12847] ksys_unshare+0x4ac/0x7b0 [ 2469.917651][T12847] __x64_sys_unshare+0x38/0x40 [ 2469.922394][T12847] x64_sys_call+0x767/0x9a0 [ 2469.926876][T12847] do_syscall_64+0x4c/0xa0 [ 2469.931271][T12847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2469.937140][T12847] [ 2469.939445][T12847] Freed by task 12847: [ 2469.943486][T12847] kasan_set_track+0x4b/0x70 [ 2469.948055][T12847] kasan_save_free_info+0x31/0x50 [ 2469.953059][T12847] ____kasan_slab_free+0x132/0x180 [ 2469.958149][T12847] __kasan_slab_free+0x11/0x20 [ 2469.962893][T12847] slab_free_freelist_hook+0xc2/0x190 [ 2469.968259][T12847] kmem_cache_free+0x12d/0x300 [ 2469.973008][T12847] cleanup_net+0xa58/0xb00 [ 2469.977414][T12847] process_one_work+0x71f/0xc40 [ 2469.982243][T12847] worker_thread+0xa29/0x11f0 [ 2469.987329][T12847] kthread+0x281/0x320 [ 2469.991380][T12847] ret_from_fork+0x1f/0x30 [ 2469.995777][T12847] [ 2469.998078][T12847] Last potentially related work creation: [ 2470.003766][T12847] kasan_save_stack+0x3a/0x60 [ 2470.008423][T12847] __kasan_record_aux_stack+0xb6/0xc0 [ 2470.013776][T12847] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2470.019567][T12847] insert_work+0x51/0x300 [ 2470.023879][T12847] __queue_work+0x9b1/0xd30 [ 2470.028362][T12847] delayed_work_timer_fn+0x61/0x80 [ 2470.033449][T12847] call_timer_fn+0x46/0x2a0 [ 2470.037930][T12847] __run_timers+0x667/0x9a0 [ 2470.042414][T12847] run_timer_softirq+0xb8/0xf0 [ 2470.047162][T12847] handle_softirqs+0x1d7/0x600 [ 2470.051902][T12847] __irq_exit_rcu+0x52/0xf0 [ 2470.056381][T12847] irq_exit_rcu+0x9/0x10 [ 2470.060610][T12847] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2470.066222][T12847] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2470.072181][T12847] [ 2470.074480][T12847] Second to last potentially related work creation: [ 2470.081036][T12847] kasan_save_stack+0x3a/0x60 [ 2470.085695][T12847] __kasan_record_aux_stack+0xb6/0xc0 [ 2470.091049][T12847] kasan_record_aux_stack_noalloc+0xb/0x10 [ 2470.096847][T12847] insert_work+0x51/0x300 [ 2470.101158][T12847] __queue_work+0x9b1/0xd30 [ 2470.105642][T12847] delayed_work_timer_fn+0x61/0x80 [ 2470.110731][T12847] call_timer_fn+0x46/0x2a0 [ 2470.115216][T12847] __run_timers+0x667/0x9a0 [ 2470.119701][T12847] run_timer_softirq+0xb8/0xf0 [ 2470.124446][T12847] handle_softirqs+0x1d7/0x600 [ 2470.129189][T12847] __irq_exit_rcu+0x52/0xf0 [ 2470.133668][T12847] irq_exit_rcu+0x9/0x10 [ 2470.137921][T12847] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 2470.143535][T12847] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 2470.149583][T12847] [ 2470.151883][T12847] The buggy address belongs to the object at ffff8881073a2300 [ 2470.151883][T12847] which belongs to the cache net_namespace of size 4224 [ 2470.166171][T12847] The buggy address is located 140 bytes inside of [ 2470.166171][T12847] 4224-byte region [ffff8881073a2300, ffff8881073a3380) [ 2470.179513][T12847] [ 2470.181817][T12847] The buggy address belongs to the physical page: [ 2470.188201][T12847] page:ffffea00041ce800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881073a4600 pfn:0x1073a0 [ 2470.199730][T12847] head:ffffea00041ce800 order:3 compound_mapcount:0 compound_pincount:0 [ 2470.208032][T12847] flags: 0x4000000000010200(slab|head|zone=1) [ 2470.214354][T12847] raw: 4000000000010200 0000000000000000 dead000000000001 ffff8881002ac600 [ 2470.222917][T12847] raw: ffff8881073a4600 0000000080070003 00000001ffffffff 0000000000000000 [ 2470.231471][T12847] page dumped because: kasan: bad access detected [ 2470.237869][T12847] page_owner tracks the page as allocated [ 2470.243556][T12847] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, tgid 283 (syz-executor), ts 20466668482, free_ts 19106212863 [ 2470.264725][T12847] post_alloc_hook+0x1f5/0x210 [ 2470.269475][T12847] prep_new_page+0x1c/0x110 [ 2470.273958][T12847] get_page_from_freelist+0x2c7b/0x2cf0 [ 2470.279480][T12847] __alloc_pages+0x19e/0x3a0 [ 2470.284046][T12847] alloc_slab_page+0x6e/0xf0 [ 2470.288613][T12847] new_slab+0x98/0x3d0 [ 2470.292662][T12847] ___slab_alloc+0x6f6/0xb50 [ 2470.297232][T12847] __slab_alloc+0x5e/0xa0 [ 2470.301539][T12847] kmem_cache_alloc+0x1b0/0x330 [ 2470.306365][T12847] copy_net_ns+0x145/0x5c0 [ 2470.310757][T12847] create_new_namespaces+0x3a2/0x660 [ 2470.316021][T12847] unshare_nsproxy_namespaces+0x120/0x170 [ 2470.321724][T12847] ksys_unshare+0x4ac/0x7b0 [ 2470.326207][T12847] __x64_sys_unshare+0x38/0x40 [ 2470.330951][T12847] x64_sys_call+0x767/0x9a0 [ 2470.335441][T12847] do_syscall_64+0x4c/0xa0 [ 2470.339833][T12847] page last free stack trace: [ 2470.344478][T12847] free_unref_page_prepare+0x742/0x750 [ 2470.349916][T12847] free_unref_page+0x8f/0x530 [ 2470.354575][T12847] __free_pages+0x67/0x100 [ 2470.358969][T12847] __free_slab+0xca/0x1a0 [ 2470.363276][T12847] __unfreeze_partials+0x160/0x190 [ 2470.368366][T12847] put_cpu_partial+0xa9/0x100 [ 2470.373026][T12847] __slab_free+0x1c4/0x280 [ 2470.377421][T12847] ___cache_free+0xbf/0xd0 [ 2470.381831][T12847] qlist_free_all+0xc6/0x140 [ 2470.386406][T12847] kasan_quarantine_reduce+0x14a/0x170 [ 2470.391856][T12847] __kasan_slab_alloc+0x24/0x80 [ 2470.396954][T12847] slab_post_alloc_hook+0x4f/0x2d0 [ 2470.402043][T12847] kmem_cache_alloc+0x16e/0x330 [ 2470.406874][T12847] getname_flags+0xb9/0x500 [ 2470.411356][T12847] __x64_sys_mkdirat+0x7c/0xa0 [ 2470.416103][T12847] x64_sys_call+0x73d/0x9a0 [ 2470.420678][T12847] [ 2470.422982][T12847] Memory state around the buggy address: [ 2470.428588][T12847] ffff8881073a2280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 2470.436628][T12847] ffff8881073a2300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2470.444684][T12847] >ffff8881073a2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2470.452724][T12847] ^ [ 2470.457026][T12847] ffff8881073a2400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2470.465062][T12847] ffff8881073a2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2470.473098][T12847] ================================================================== [ 2470.481186][T12847] Disabling lock debugging due to kernel taint [ 2470.493273][ T28] audit: type=1400 audit(2000003349.002:3573): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 2470.547595][ T28] audit: type=1400 audit(2000003349.002:3574): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2470.569282][ T28] audit: type=1400 audit(2000003349.002:3575): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2470.590615][ T28] audit: type=1400 audit(2000003349.002:3576): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2470.612307][ T28] audit: type=1400 audit(2000003349.002:3577): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2470.632875][ T28] audit: type=1400 audit(2000003349.002:3578): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2470.795127][ T28] audit: type=1400 audit(2000003349.002:3579): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2470.860530][ T28] audit: type=1400 audit(2000003349.002:3580): avc: denied { write } for pid=275 comm="syz-executor" path="pipe:[13180]" dev="pipefs" ino=13180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2471.391509][T32515] device bridge_slave_1 left promiscuous mode [ 2471.397654][T32515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2471.405239][T32515] device bridge_slave_0 left promiscuous mode [ 2471.411390][T32515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2471.419139][T32515] device veth1_macvtap left promiscuous mode [ 2471.425196][T32515] device veth0_vlan left promiscuous mode [ 2471.752223][T32515] tipc: Left network mode [ 2472.212813][T32515] device bridge_slave_1 left promiscuous mode [ 2472.218950][T32515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2472.226479][T32515] device bridge_slave_0 left promiscuous mode [ 2472.232672][T32515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2472.240653][T32515] device bridge_slave_1 left promiscuous mode [ 2472.246797][T32515] bridge0: port 2(bridge_slave_1) entered disabled state [ 2472.254300][T32515] device bridge_slave_0 left promiscuous mode [ 2472.260396][T32515] bridge0: port 1(bridge_slave_0) entered disabled state [ 2472.268500][T32515] device veth1_macvtap left promiscuous mode [ 2472.274524][T32515] device veth0_vlan left promiscuous mode [ 2472.280458][T32515] device veth1_macvtap left promiscuous mode [ 2472.286457][T32515] device veth0_vlan left promiscuous mode [ 2472.292629][T32515] device veth1_macvtap left promiscuous mode [ 2472.298622][T32515] device veth0_vlan left promiscuous mode