last executing test programs: 13.293736122s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) close_range(r1, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000c40)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{}, &(0x7f00000010c0), 0x0}, 0x20) setxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000280)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x3) syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x121a80) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000001240)=@urb_type_control={0x2, {}, 0x2000006, 0xa5, &(0x7f00000002c0)={0x40, 0xc, 0x9, 0x7}, 0x8, 0x100, 0x2, 0x0, 0x312, 0x3, 0x0}) 11.422732914s ago: executing program 4 (id=9): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x840) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 11.304187128s ago: executing program 4 (id=12): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x183b41, 0x51) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x800000, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x428400, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}}, 0x814) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_GS(0x1e, r3, &(0x7f0000000380), 0x1004) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x6, 0x0, 0x103, 0x1}, 0x20) r7 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) poll(&(0x7f0000000280)=[{r8, 0x80}], 0x1, 0x9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) creat(&(0x7f0000000e40)='./file1\x00', 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 9.268644275s ago: executing program 4 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4400c800) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="85000000ae00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd296303406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c126ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a47344870624"], 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00020000000000000000000000000000000000000000000000001f00"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, 0x0, 0x0) 9.000267284s ago: executing program 4 (id=22): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB='\"['], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$input_event(r3, &(0x7f0000000280)={{r4, r5/1000+60000}, 0x1f, 0x3b0, 0x4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r7, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x800, 0x1000, 0x0, 0xa, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r10, 0x25, 0x2, @void}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', r10, r3, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r12, r13, 0x4, r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.966591735s ago: executing program 32 (id=22): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="38010000fe0000", @ANYBLOB='\"['], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$input_event(r3, &(0x7f0000000280)={{r4, r5/1000+60000}, 0x1f, 0x3b0, 0x4}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x20, r7, 0x1, 0x4, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc011}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'dummy0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x800, 0x1000, 0x0, 0xa, 0xa0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r8, r10, 0x25, 0x2, @void}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x6, '\x00', r10, r3, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r12, r13, 0x4, r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.285187957s ago: executing program 5 (id=23): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$eJzs3c1LG2kcwPFf3hNdNzksy7LswoMLssviYAJ728PKorBsoEVNoRYKYx3bkDGRTBBSSvVQ6LXnHjz0WFpKobdeSunVS/+Cvt28eKtQ6ZTJvBiTMUaLr/1+DubJPL/fPM/MPGP00TzZ+PveYmXB0j7ZcdnxWHISlZj3bFX+eLX29tfpl9+5z5WaHJ/JF5SKisiVW4+GXzQGLz37/nlK1nNXNzYLH9Z/mRH5PHNDoqpsqapt27aaq9UaESd5vmxVNKUumoZuGapctYx6Q+mten3ONNSCWVtaaiq9Oj80sFQ3LEvp1aaqGE3VqKlGvan063q5qjRNU0MDAhHJBaVoV12kV2Lp4ZZty6ZzgVKrYtt2SPSqX0h4j6mv6yxOk47r3zO2a3DEjrJnOA5bdjy4/sl9rj/OH/f+f3e/n/sf58/05dn/x4vFiSml0iKLd5dLyyX30a1/MyhlMcWQtak/Z7fFGSMeiThfJ/8rToyplpyMLK54+SvLJffFYXzBy89L1vk5pS1f/Py8m69kxHmF8fMTMtCeX5Cs/BCeX/DzJdrWflJ+/60tX5OsvL4mNTFlXpzcnfzbeaX+vVBUu/ufacUBAAAAAAAAAHAWaSqwM38fCf7Um9G0VOs/PoL6jLPZiXMDgvn1McnKdvj8/Fgwv98+vx6Xn+MneOAAAAAAAHxDrObNim6aRv1oCrEHmR5NJETEKYjcGXY6E76faCvG+NHrcX+tJ0Wkuyq2RxNhhcxfbntPpryOyVGeqEMWoiLSvsV9s4Zz8OZTPyYj4Wf1IANgNBl65tPHesjST7CkDzewU30Prc5CZNvf8lNojB3Zfz+2bibcLf6NuV/r/xzodtizkO48UaPv3f2aPb5pfAym+AAAAACcIW2/OAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBNyqMXD/HX7d1eJ9xHx3UuydX5OPOv+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiFvgQAAP//e6KuLg==") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6469736361726400618b7365743d63703835322c757466383d202c6e6f6e756d746191c93d2c23f3646e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f686c6174653d31686f72746e0000000000000008742c756eb55b00006174653d312c757466383d312c754e695f786c6174653d302c756e695f786c6174650f000000686f72746e616d653d6d697865642c726f6469722c75030054786cb2f6d20ec9408faa68a6b1c6277b48ddf63d78b3153af08ac8404ea3116354928c9038a9ea0abbc039c83b8faf5c859c4083ea9afd2e4dfe50f32f38304aa32974be374fca08f14fc27bdbc164ad5656e0629759f97ac24e23fd9589137b7ed5834a9bb45ff71c4fcec993454e5d406d8b90f9f1e32dcca66ed69ccf14c2c12e904a41259dc9e9a0c7328fc5b4550657cb9d1f2197e8787d4c6839c27b5741a02e465902c61bd16d529d7aeb37599b173c801230f5094032b412caaed8f6eb27c152a6b58ef3f94027df51ce6c0307b773004f49ce5dd1ce84fa1978e392", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$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") 7.433735816s ago: executing program 5 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="240000000000000029000000000000003108b70000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.821332196s ago: executing program 2 (id=43): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$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") 6.578749483s ago: executing program 5 (id=45): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfff}}]}, 0x5, 0x504, &(0x7f0000001000)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000200)={@id={0x2, 0x0, @c}}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="a8"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0xac) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x1ae) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0)) 6.342374471s ago: executing program 5 (id=48): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x7, 0x3, 0xc, 0x12, "d5ed31bf46d2342c9961b1720535d8eaf45713"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000900)=0xd) (async) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0xab, 0x800) (async) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000580)) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r9, r8, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ftruncate(r10, 0xc17a) write$eventfd(r6, &(0x7f0000000640)=0x9, 0x8) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000011c0)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0xfffffdea}, 0x1, 0x0, 0x0, 0x801}, 0x4) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000004000000060000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ffff000000000000008ca4f498298b", @ANYRES32=r5, @ANYRES8=r4, @ANYRESOCT=r2, @ANYRES16=r3], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.831209688s ago: executing program 5 (id=50): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x181401, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x798202, 0x78e22799f4a46e8e) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x2, 0x7, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xcefa, 0x0, 0xd32f, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0xfa], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x104000000000000) 5.722796262s ago: executing program 2 (id=52): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() waitid(0x1, r0, &(0x7f0000000440), 0x20000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r1], 0x0) socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_clone(0x6040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f"], 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800010, 0x0) r7 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = syz_open_procfs$pagemap(r7, &(0x7f0000000240)) preadv(r8, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x5, 0xc, 0xff) 5.656321064s ago: executing program 33 (id=50): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x181401, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='.\x00', 0x798202, 0x78e22799f4a46e8e) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x2, 0x7, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xcefa, 0x0, 0xd32f, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0xfa], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x104000000000000) 5.1798738s ago: executing program 1 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="240000000000000029000000000000003108b70000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.810112982s ago: executing program 6 (id=53): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$eJzs3U9oY1UXAPCTvjRpB76v3YmCEN0JWqaz040t0sJgNyrBPwsxOB2VpAotFtvFtHWhuBRc6sqdgi5ciEsRFHHnwq0jyqi40IKLAQevvLy8JG3aTjtYpfj7QdObe+9557yXR/Iakttn5qJ9aTwu7+5eW/x+ohLVuYfm4nolpiOL0naMqh3QBwCcDddTit9S4ZghlVMuCQA4Zd3X/+ciohHTRc+rnx81P3n1B4Azr/f3/+RRcyYOG3jpVEoCAE7ZyPv/d+8ZrnV/quXd6tCnAgCAs+qxJ596eH4p4tFGYyJi5fX15nozHhiMz1+OF6ITy3E+puJGRHGhkN9UureLF5cWzjcaja34cTqaETHWC2wWVwrzWTe+HrP9kf7VRkopW/xoaWG20RUR21vd/LFSWW+Ox7le/m/PxfLgwmO6LCK6NxeXFi40ehtorpTxWxE7g/ct8vpnYiq+fra/mZTKTzAuLVyZHevdGcSvN+txqZ/z0HdAAAAAAAAAAAAAAAAAAAAAAADglsw0+qb76+ek/Hex+M3MzAHj3fVxivje+kA7xfpAqZ4ipV9fua/5RhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAoG9toxatTmd5dW1jsz3c2Fpd2xiLiLznxS8/+GwyRufcpFEtUtQj+ikavbSb7VbKyskpixgNz/LkZc97H/crHp5T7+/FZrv1+0gZ9XJo75Z3I2/8764f3h4M3ZmVW/5zMDmLg3cwGyrjwX1JV/5flHSSA9VvXBjuqY9mv5pSGup5bTj8ytOjG4xKRPXkD9xmeywOn5PyxhfXnr+9PPqtT1PhnnunHr/61rs/t1udqER+9kSnU1tdu5HarUo5+WSHJT/UZU8likZl+EyoHhW+s7enlX3zyxN3vPnV8bKn4Z6X8/N535ys2J0P94fXikZeZt6oDc6WyUH4eG8nOsvjB5z8N2vcwmN62zufvJ/Sdz8dO0Uhr35s5Gmj8nc+BwEAAAAAAAAAAAAAAAAAAIWh74r39L7sO35U1P2PnH5lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDPGfz//6HGznbs6zlO44+tA6Lqy6trEbV/ezcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiP+ysAAP//inpXkA==") 4.56785439s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.327203648s ago: executing program 1 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0xa, 0x5, 0x4, 0x8, 0x9, 0x437, 0x7}, {0x1, 0x0, 0x7, 0x7, 0xa0, 0x8001, 0x58}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000)=0x30, 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.26682282s ago: executing program 1 (id=60): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 4.025118138s ago: executing program 2 (id=61): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0xce4, r6}, 0x38) 3.95012599s ago: executing program 6 (id=62): syz_emit_ethernet(0x81, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tipc={{0x14, 0x4, 0x1, 0x34, 0x73, 0x68, 0x0, 0x9, 0x6, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x0, 0x7, "1597d766a0"}, {0x1, 0xf, "3e5018d43faed6ec4ca7f6b1cd"}, {0x6, 0x11, "2a5b51872b1d50dd7b22850b2b58b3"}, {0x2, 0xb, "23d56ef64de6565af2"}]}, @ra={0x94, 0x4, 0x1}]}}, @payload_direct={{{{0x23, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0xd900, 0x0, 0x3, 0x1, 0x0, 0x3, 0x6, 0x1, 0x3, 0x4e22, 0x4e24}, 0x4, 0x3}}, [0x0, 0x0, 0x0]}}}}}, 0x0) 3.938427261s ago: executing program 6 (id=63): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$eJzs3U9oY1UXAPCTvjRpB76v3YmCEN0JWqaz040t0sJgNyrBPwsxOB2VpAotFtvFtHWhuBRc6sqdgi5ciEsRFHHnwq0jyqi40IKLAQevvLy8JG3aTjtYpfj7QdObe+9557yXR/Iakttn5qJ9aTwu7+5eW/x+ohLVuYfm4nolpiOL0naMqh3QBwCcDddTit9S4ZghlVMuCQA4Zd3X/+ciohHTRc+rnx81P3n1B4Azr/f3/+RRcyYOG3jpVEoCAE7ZyPv/d+8ZrnV/quXd6tCnAgCAs+qxJ596eH4p4tFGYyJi5fX15nozHhiMz1+OF6ITy3E+puJGRHGhkN9UureLF5cWzjcaja34cTqaETHWC2wWVwrzWTe+HrP9kf7VRkopW/xoaWG20RUR21vd/LFSWW+Ox7le/m/PxfLgwmO6LCK6NxeXFi40ehtorpTxWxE7g/ct8vpnYiq+fra/mZTKTzAuLVyZHevdGcSvN+txqZ/z0HdAAAAAAAAAAAAAAAAAAAAAAADglsw0+qb76+ek/Hex+M3MzAHj3fVxivje+kA7xfpAqZ4ipV9fua/5RhZ71gfavz7PuoUEAQAAAAAAAAAAAAAAAAAAoG9toxatTmd5dW1jsz3c2Fpd2xiLiLznxS8/+GwyRufcpFEtUtQj+ikavbSb7VbKyskpixgNz/LkZc97H/crHp5T7+/FZrv1+0gZ9XJo75Z3I2/8764f3h4M3ZmVW/5zMDmLg3cwGyrjwX1JV/5flHSSA9VvXBjuqY9mv5pSGup5bTj8ytOjG4xKRPXkD9xmeywOn5PyxhfXnr+9PPqtT1PhnnunHr/61rs/t1udqER+9kSnU1tdu5HarUo5+WSHJT/UZU8likZl+EyoHhW+s7enlX3zyxN3vPnV8bKn4Z6X8/N535ys2J0P94fXikZeZt6oDc6WyUH4eG8nOsvjB5z8N2vcwmN62zufvJ/Sdz8dO0Uhr35s5Gmj8nc+BwEAAAAAAAAAAAAAAAAAAIWh74r39L7sO35U1P2PnH5lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDPGfz//6HGznbs6zlO44+tA6Lqy6trEbV/ezcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiP+ysAAP//inpXkA==") 3.595506592s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x32c881, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f3368c4daae85", 0x2c}], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r0, 0x0, r7, 0x0, 0x7fff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() 3.367964079s ago: executing program 1 (id=65): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) fsopen(&(0x7f0000000040)='ext4\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x7}, 0x33) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) 3.224800184s ago: executing program 1 (id=66): r0 = socket$nl_audit(0x10, 0x3, 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r0, 0x891d, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r1 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r1, 0x800799c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @private0, 0x9}, 0x1c) sendfile(r2, r1, 0x0, 0xf000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000000)='./file0\x00', 0xc000, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x3fb, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r7, 0x2000009) sendfile(r6, r7, 0x0, 0x7ffff000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r9}, 0x10, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000efff010000000000007be7000400c4f4"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x80}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl2\x00', r12, 0x4, 0x57, 0x9, 0xc, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x10, 0x10, 0x2a6d3e47, 0x6}}) 3.181376985s ago: executing program 2 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r3, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket(0x2, 0x3, 0x6) sendto$inet(r6, 0x0, 0x0, 0x24000040, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0)={[], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@smackfsroot={'smackfsroot', 0x3d, '^['}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xc9o\xf9h\x05\xf8w\xa3QU;\xf7\\\xfcy)\x03\xb0'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+]'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*$!,]^]$-//'}}, {@context={'context', 0x3d, 'root'}}]}, 0x0, 0x47b, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x389492, 0x0, 0xfd, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000400)={[{@volatile}, {@redirect_dir_nofollow}, {@verity_require}, {@uuid_null}, {@default_permissions}]}) getpid() timer_create(0x1, 0x0, &(0x7f0000bbdffc)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000006c0)={{0x3, 0x3, 0xfb4, 0x3, 0xfffffffc}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002500)=""/4113, 0x1011}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.095606128s ago: executing program 6 (id=68): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() waitid(0x1, r1, &(0x7f0000000440), 0x20000000, &(0x7f00000004c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r2], 0x0) socket$inet(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_clone(0x6040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x10) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800010, 0x0) syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r8, 0x20, &(0x7f0000000140)={&(0x7f0000001c80)=""/4096, 0x1000, 0x0, &(0x7f00000002c0)=""/158, 0x9e}}, 0x10) 2.72740134s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="240000000000000029000000000000003108b70000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.288150215s ago: executing program 2 (id=71): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() waitid(0x1, r0, &(0x7f0000000440), 0x20000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r1], 0x0) socket$inet(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_clone(0x6040000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x4000000) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000027f"], 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800010, 0x0) r7 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r8 = syz_open_procfs$pagemap(r7, &(0x7f0000000240)) preadv(r8, &(0x7f0000000c00)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x5, 0xc, 0xff) 1.881661328s ago: executing program 0 (id=73): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$eJzs3c1LG2kcwPFf3hNdNzksy7LswoMLssviYAJ728PKorBsoEVNoRYKYx3bkDGRTBBSSvVQ6LXnHjz0WFpKobdeSunVS/+Cvt28eKtQ6ZTJvBiTMUaLr/1+DubJPL/fPM/MPGP00TzZ+PveYmXB0j7ZcdnxWHISlZj3bFX+eLX29tfpl9+5z5WaHJ/JF5SKisiVW4+GXzQGLz37/nlK1nNXNzYLH9Z/mRH5PHNDoqpsqapt27aaq9UaESd5vmxVNKUumoZuGapctYx6Q+mten3ONNSCWVtaaiq9Oj80sFQ3LEvp1aaqGE3VqKlGvan063q5qjRNU0MDAhHJBaVoV12kV2Lp4ZZty6ZzgVKrYtt2SPSqX0h4j6mv6yxOk47r3zO2a3DEjrJnOA5bdjy4/sl9rj/OH/f+f3e/n/sf58/05dn/x4vFiSml0iKLd5dLyyX30a1/MyhlMcWQtak/Z7fFGSMeiThfJ/8rToyplpyMLK54+SvLJffFYXzBy89L1vk5pS1f/Py8m69kxHmF8fMTMtCeX5Cs/BCeX/DzJdrWflJ+/60tX5OsvL4mNTFlXpzcnfzbeaX+vVBUu/ufacUBAAAAAAAAAHAWaSqwM38fCf7Um9G0VOs/PoL6jLPZiXMDgvn1McnKdvj8/Fgwv98+vx6Xn+MneOAAAAAAAHxDrObNim6aRv1oCrEHmR5NJETEKYjcGXY6E76faCvG+NHrcX+tJ0Wkuyq2RxNhhcxfbntPpryOyVGeqEMWoiLSvsV9s4Zz8OZTPyYj4Wf1IANgNBl65tPHesjST7CkDzewU30Prc5CZNvf8lNojB3Zfz+2bibcLf6NuV/r/xzodtizkO48UaPv3f2aPb5pfAym+AAAAACcIW2/OAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBNyqMXD/HX7d1eJ9xHx3UuydX5OPOv+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiFvgQAAP//e6KuLg==") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$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") 1.82256227s ago: executing program 3 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.788441562s ago: executing program 3 (id=76): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) fsopen(&(0x7f0000000040)='ext4\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x7}, 0x33) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00"], 0x20}}, 0x0) 1.776769532s ago: executing program 3 (id=77): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r6}, 0x38) 1.491360871s ago: executing program 6 (id=78): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r4 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r7, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1.018067127s ago: executing program 0 (id=79): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$eJzs3c1LG2kcwPFf3hNdNzksy7LswoMLssviYAJ728PKorBsoEVNoRYKYx3bkDGRTBBSSvVQ6LXnHjz0WFpKobdeSunVS/+Cvt28eKtQ6ZTJvBiTMUaLr/1+DubJPL/fPM/MPGP00TzZ+PveYmXB0j7ZcdnxWHISlZj3bFX+eLX29tfpl9+5z5WaHJ/JF5SKisiVW4+GXzQGLz37/nlK1nNXNzYLH9Z/mRH5PHNDoqpsqapt27aaq9UaESd5vmxVNKUumoZuGapctYx6Q+mten3ONNSCWVtaaiq9Oj80sFQ3LEvp1aaqGE3VqKlGvan063q5qjRNU0MDAhHJBaVoV12kV2Lp4ZZty6ZzgVKrYtt2SPSqX0h4j6mv6yxOk47r3zO2a3DEjrJnOA5bdjy4/sl9rj/OH/f+f3e/n/sf58/05dn/x4vFiSml0iKLd5dLyyX30a1/MyhlMcWQtak/Z7fFGSMeiThfJ/8rToyplpyMLK54+SvLJffFYXzBy89L1vk5pS1f/Py8m69kxHmF8fMTMtCeX5Cs/BCeX/DzJdrWflJ+/60tX5OsvL4mNTFlXpzcnfzbeaX+vVBUu/ufacUBAAAAAAAAAHAWaSqwM38fCf7Um9G0VOs/PoL6jLPZiXMDgvn1McnKdvj8/Fgwv98+vx6Xn+MneOAAAAAAAHxDrObNim6aRv1oCrEHmR5NJETEKYjcGXY6E76faCvG+NHrcX+tJ0Wkuyq2RxNhhcxfbntPpryOyVGeqEMWoiLSvsV9s4Zz8OZTPyYj4Wf1IANgNBl65tPHesjST7CkDzewU30Prc5CZNvf8lNojB3Zfz+2bibcLf6NuV/r/xzodtizkO48UaPv3f2aPb5pfAym+AAAAACcIW2/OAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBNyqMXD/HX7d1eJ9xHx3UuydX5OPOv+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiFvgQAAP//e6KuLg==") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$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") 924.89307ms ago: executing program 3 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x32c881, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f3368c4daae85", 0x2c}], 0x1) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{0x0}], 0x1, 0x2) r7 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) splice(r0, 0x0, r7, 0x0, 0x7fff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() 556.087172ms ago: executing program 6 (id=81): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r2, @ANYBLOB="05", @ANYRESOCT], 0x0) 482.530624ms ago: executing program 2 (id=82): setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x808c55, &(0x7f0000000200)={[{@uni_xlateno}, {@uni_xlate}, {@numtail}, {@rodir}, {@utf8}, {@shortname_win95}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@numtail}, {@fat=@check_strict}, {@rodir}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@fat=@gid}]}, 0xf5, 0x304, &(0x7f0000000340)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) stat(&(0x7f0000000240)='./file0/file2\x00', &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6469736361726400618b7365743d63703835322c757466383d202c6e6f6e756d746191c93d2c23f3646e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f686c6174653d31686f72746e0000000000000008742c756eb55b00006174653d312c757466383d312c754e695f786c6174653d302c756e695f786c6174650f000000686f72746e616d653d6d697865642c726f6469722c75030054786cb2f6d20ec9408faa68a6b1c6277b48ddf63d78b3153af08ac8404ea3116354928c9038a9ea0abbc039c83b8faf5c859c4083ea9afd2e4dfe50f32f38304aa32974be374fca08f14fc27bdbc164ad5656e0629759f97ac24e23fd9589137b7ed5834a9bb45ff71c4fcec993454e5d406d8b90f9f1e32dcca66ed69ccf14c2c12e904a41259dc9e9a0c7328fc5b4550657cb9d1f2197e8787d4c6839c27b5741a02e465902c61bd16d529d7aeb37599b173c801230f5094032b412caaed8f6eb27c152a6b58ef3f94027df51ce6c0307b773004f49ce5dd1ce84fa1978e392", @ANYRES16], 0x1, 0x370, &(0x7f00000008c0)="$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") 173.583305ms ago: executing program 0 (id=83): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f37e9140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe955, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000380)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) 55.166108ms ago: executing program 1 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 51.963999ms ago: executing program 3 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0xa, 0x5, 0x4, 0x8, 0x9, 0x437, 0x7}, {0x1, 0x0, 0x7, 0x7, 0xa0, 0x8001, 0x58}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000)=0x30, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 3 (id=86): timer_getoverrun(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x81, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tipc={{0x14, 0x4, 0x1, 0x34, 0x73, 0x68, 0x0, 0x9, 0x6, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x0, 0x7, "1597d766a0"}, {0x1, 0xf, "3e5018d43faed6ec4ca7f6b1cd"}, {0x6, 0x11, "2a5b51872b1d50dd7b22850b2b58b3"}, {0x2, 0xb, "23d56ef64de6565af2"}]}, @ra={0x94, 0x4, 0x1}]}}, @payload_direct={{{{0x23, 0x0, 0x1, 0x1, 0x1, 0x8, 0x0, 0x2, 0xd900, 0x0, 0x3, 0x1, 0x0, 0x3, 0x6, 0x1, 0x3, 0x4e22, 0x4e24}, 0x4, 0x3}}, [0x0, 0x0, 0x0]}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 328.522310][ T30] audit: type=1400 audit(1774969991.673:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 328.523700][ T273] cgroup: Unknown subsys name 'net' [ 328.545105][ T30] audit: type=1400 audit(1774969991.673:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 328.572806][ T30] audit: type=1400 audit(1774969991.703:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 328.573335][ T273] cgroup: Unknown subsys name 'devices' [ 328.749669][ T273] cgroup: Unknown subsys name 'hugetlb' [ 328.755570][ T273] cgroup: Unknown subsys name 'rlimit' [ 328.921643][ T30] audit: type=1400 audit(1774969992.073:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.945290][ T30] audit: type=1400 audit(1774969992.073:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 328.970583][ T30] audit: type=1400 audit(1774969992.073:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 328.976746][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 329.002796][ T30] audit: type=1400 audit(1774969992.153:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 329.028632][ T30] audit: type=1400 audit(1774969992.153:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 329.059068][ T30] audit: type=1400 audit(1774969992.213:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 329.084980][ T30] audit: type=1400 audit(1774969992.213:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 329.085045][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 329.638649][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.645825][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.653599][ T282] device bridge_slave_0 entered promiscuous mode [ 329.661980][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.669102][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.676626][ T282] device bridge_slave_1 entered promiscuous mode [ 329.733827][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.741326][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.748963][ T281] device bridge_slave_0 entered promiscuous mode [ 329.757256][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.764590][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.772230][ T281] device bridge_slave_1 entered promiscuous mode [ 329.863375][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.870740][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.878751][ T283] device bridge_slave_0 entered promiscuous mode [ 329.887078][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.894334][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.901858][ T283] device bridge_slave_1 entered promiscuous mode [ 329.941500][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.949053][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.956963][ T284] device bridge_slave_0 entered promiscuous mode [ 329.966965][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.974094][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.981851][ T284] device bridge_slave_1 entered promiscuous mode [ 330.003726][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.010833][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.018345][ T285] device bridge_slave_0 entered promiscuous mode [ 330.027942][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.035284][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.042777][ T285] device bridge_slave_1 entered promiscuous mode [ 330.108070][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.115465][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.123274][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.130526][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.192867][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.199967][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.207255][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.214434][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.261748][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.268948][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.276307][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.283384][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.305673][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.312776][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.320579][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.327638][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.336826][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.344686][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.352564][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.360292][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.368164][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.375896][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.383426][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.390700][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.398445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.406118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.433544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.441883][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.449079][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.456554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.465144][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.472226][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.479864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.501274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.509553][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.518202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.526644][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.533829][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.541654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.552354][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.559715][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.590353][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.598664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.608636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.625133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.635477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.644192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.657557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.665230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.686212][ T282] device veth0_vlan entered promiscuous mode [ 330.696780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.705508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.714185][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.721707][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.729654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.738122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.746205][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.753401][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.761308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.769654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.777805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.785881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.793956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.805053][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.813444][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.820494][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.828221][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 330.835677][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.843506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.852289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.860837][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.868215][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.875824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 330.883863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.891557][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.899784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.907281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.917152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.925536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.934496][ T281] device veth0_vlan entered promiscuous mode [ 330.947399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.955836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.984056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.992596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.001059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.009551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.018241][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.025368][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.033007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.041895][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.050392][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.057550][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.065147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.078979][ T281] device veth1_macvtap entered promiscuous mode [ 331.089999][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.098535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.106512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.114936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.123588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.132080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.140438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.148563][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.157223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.170189][ T282] device veth1_macvtap entered promiscuous mode [ 331.177323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.185624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.194010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.206686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.218599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.239675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.247800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.255406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.263515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.272629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.282146][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.290627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.298740][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.306897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.314944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.324908][ T284] device veth0_vlan entered promiscuous mode [ 331.332768][ T285] device veth0_vlan entered promiscuous mode [ 331.339993][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.348762][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.363393][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 331.377424][ T285] device veth1_macvtap entered promiscuous mode [ 331.391543][ T284] device veth1_macvtap entered promiscuous mode [ 331.400272][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.418800][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.430915][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.439571][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.448678][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.457087][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.480738][ T283] device veth0_vlan entered promiscuous mode [ 331.495225][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.504423][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.512880][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.520464][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.786967][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.796032][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.805091][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.813839][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.825483][ T312] device macsec0 entered promiscuous mode [ 331.831785][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 331.849303][ T314] loop4: detected capacity change from 0 to 128 [ 331.862790][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.874699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.885575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.894238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.909687][ T311] device macsec0 left promiscuous mode [ 331.915765][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.924443][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.946257][ T316] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 331.996065][ T283] device veth1_macvtap entered promiscuous mode [ 332.020554][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.028690][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 332.037386][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 332.048327][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 332.058321][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 332.662120][ T323] loop3: detected capacity change from 0 to 16 [ 332.718367][ T323] erofs: Unknown parameter './cgroup.net/syz1' [ 333.346041][ T323] loop3: detected capacity change from 0 to 40427 [ 333.353499][ T323] SELinux: security_context_str_to_sid(unconf) failed for (dev ?, type ?) errno=-22 [ 333.420626][ T323] F2FS-fs (loop3): Invalid segment/section count (24 != 24 * 3) [ 333.428497][ T323] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 333.440124][ T323] F2FS-fs (loop3): invalid crc value [ 333.583719][ T323] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 7 [ 333.591542][ T323] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 333.630598][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 333.630614][ T30] audit: type=1400 audit(1774969996.783:111): avc: denied { create } for pid=330 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.692772][ T337] loop2: detected capacity change from 0 to 256 [ 333.703262][ T30] audit: type=1400 audit(1774969996.813:112): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 333.795168][ T337] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 333.843220][ T30] audit: type=1400 audit(1774969996.813:113): avc: denied { write } for pid=330 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 333.947584][ T287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 333.998263][ T30] audit: type=1400 audit(1774969996.833:114): avc: denied { read write } for pid=334 comm="syz.1.10" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.227588][ T287] usb 2-1: Using ep0 maxpacket: 16 [ 334.413591][ T30] audit: type=1400 audit(1774969996.833:115): avc: denied { open } for pid=334 comm="syz.1.10" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.527475][ T354] loop2: detected capacity change from 0 to 128 [ 334.587814][ T287] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 334.638584][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.737582][ T30] audit: type=1400 audit(1774969996.833:116): avc: denied { ioctl } for pid=334 comm="syz.1.10" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 334.763146][ T354] ======================================================= [ 334.763146][ T354] WARNING: The mand mount option has been deprecated and [ 334.763146][ T354] and is ignored by this kernel. Remove the mand [ 334.763146][ T354] option from the mount to silence this warning. [ 334.763146][ T354] ======================================================= [ 334.807566][ T287] usb 2-1: Product: syz [ 334.811884][ T287] usb 2-1: Manufacturer: syz [ 334.816574][ T287] usb 2-1: SerialNumber: syz [ 334.837255][ T287] usb 2-1: config 0 descriptor?? [ 334.857677][ T30] audit: type=1400 audit(1774969996.833:117): avc: denied { create } for pid=333 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.888246][ T287] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 334.924338][ T30] audit: type=1400 audit(1774969996.843:118): avc: denied { ioctl } for pid=333 comm="syz.2.8" path="socket:[15539]" dev="sockfs" ino=15539 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 334.949135][ T30] audit: type=1400 audit(1774969996.843:119): avc: denied { map_create } for pid=333 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.008667][ T347] loop4: detected capacity change from 0 to 40427 [ 335.011787][ T30] audit: type=1400 audit(1774969996.843:120): avc: denied { map_read map_write } for pid=333 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 335.026810][ T347] F2FS-fs (loop4): invalid crc value [ 335.071959][ T361] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 335.089572][ T335] netlink: 'syz.1.10': attribute type 4 has an invalid length. [ 335.090608][ T354] loop2: detected capacity change from 0 to 256 [ 335.105656][ T366] loop3: detected capacity change from 0 to 128 [ 335.114662][ T347] F2FS-fs (loop4): Found nat_bits in checkpoint [ 335.128554][ T367] loop0: detected capacity change from 0 to 512 [ 335.161039][ T347] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 335.169646][ T354] FAT-fs (loop2): bogus logical sector size 58182 [ 335.176109][ T354] FAT-fs (loop2): Can't find a valid FAT filesystem [ 335.229033][ T366] loop3: detected capacity change from 0 to 256 [ 335.253687][ T366] FAT-fs (loop3): bogus logical sector size 58182 [ 335.272299][ T366] FAT-fs (loop3): Can't find a valid FAT filesystem [ 335.284546][ T309] usb 2-1: USB disconnect, device number 2 [ 335.594030][ T361] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 335.609700][ T373] FAT-fs (loop2): Unrecognized mount option "shmrtname=winnt" or missing value [ 335.842539][ T285] attempt to access beyond end of device [ 335.842539][ T285] loop4: rw=524288, want=45072, limit=40427 [ 335.864496][ T285] attempt to access beyond end of device [ 335.864496][ T285] loop4: rw=0, want=45072, limit=40427 [ 335.931201][ T379] tipc: Started in network mode [ 335.936792][ T379] tipc: Node identity 4, cluster identity 4711 [ 335.943394][ T379] tipc: Node number set to 4 [ 335.951605][ T285] attempt to access beyond end of device [ 335.951605][ T285] loop4: rw=2049, want=45112, limit=40427 [ 336.008615][ T373] erofs: (device loop2): mounted with root inode @ nid 36. [ 336.018085][ T20] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 336.116466][ T285] syz-executor (285) used greatest stack depth: 21728 bytes left [ 336.267861][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.275354][ T386] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.283210][ T386] device bridge_slave_0 entered promiscuous mode [ 336.289738][ T326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 336.290409][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.305046][ T386] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.312839][ T386] device bridge_slave_1 entered promiscuous mode [ 336.353842][ T386] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.360932][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.368260][ T386] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.375493][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.402330][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.410378][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.417934][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.427638][ T20] usb 1-1: not running at top speed; connect to a high speed hub [ 336.436500][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.444854][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.451942][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.459642][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 336.468881][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.475941][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.483583][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.492500][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.501253][ T10] device bridge_slave_1 left promiscuous mode [ 336.507638][ T20] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 336.507745][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.518909][ T20] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.536132][ T326] usb 4-1: Using ep0 maxpacket: 32 [ 336.536444][ T10] device bridge_slave_0 left promiscuous mode [ 336.547700][ T287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 336.548276][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.563286][ T10] device veth1_macvtap left promiscuous mode [ 336.569602][ T10] device veth0_vlan left promiscuous mode [ 336.658705][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.672142][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.681248][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.689040][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.698977][ T386] device veth0_vlan entered promiscuous mode [ 336.710865][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.720579][ T386] device veth1_macvtap entered promiscuous mode [ 336.727884][ T326] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.731445][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 336.735725][ T20] usb 1-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice= 0.40 [ 336.753800][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.762926][ T20] usb 1-1: Product: 鬭兞쯵䊯鸡Ỿ仚퍖晦᤾氩ⱒ卆✐≖ॹ뫠峐ˆ佃혎镱헊顐羆嵩䃌Წ⡱溫욶騖⬓韦玛粌䜯ᄡ쇡㖵 [ 336.781270][ T20] usb 1-1: Manufacturer: 쯟᪻鹽䁪㒼塁ꢳ☊蝩鈟箂宷菕霞ꄐ畭ㅟ踢⺊⋘藲䖄嫃뢉穊܁⒑ᏍͿ恠灗尫墈ꍞ팍澠க鷒䮜䣊蘤Ṛ︡ [ 336.781529][ T328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.798071][ T20] usb 1-1: SerialNumber: 뻗㻂琍覀⃎뼧ꞕ鈶쥼픘ꑉ낡稯枈듏녌尿効멸㿔᷀聧諝杬ﷁ鈂㞍뭔㍮ベ窹옋⣥釯揩郫珞캐㇈郚㰲뷇刹ԝ纁䴋錭്؁橖蠽䛔诹 [ 336.837649][ T326] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 336.857548][ T326] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 336.868828][ T326] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 336.878082][ T326] usb 4-1: config 128 has no interface number 0 [ 336.884406][ T326] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.895387][ T326] usb 4-1: config 128 interface 127 has no altsetting 0 [ 336.903935][ T404] set_capacity_and_notify: 2 callbacks suppressed [ 336.903951][ T404] loop5: detected capacity change from 0 to 128 [ 336.947612][ T287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.957835][ T287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.971776][ T404] loop5: detected capacity change from 0 to 256 [ 336.988309][ T404] FAT-fs (loop5): bogus logical sector size 58182 [ 337.005181][ T404] FAT-fs (loop5): Can't find a valid FAT filesystem [ 337.057759][ T287] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.067159][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.087537][ T287] usb 3-1: SerialNumber: syz [ 337.098362][ T326] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 337.115287][ T326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.125253][ T326] usb 4-1: Product: syz [ 337.130255][ T326] usb 4-1: Manufacturer: syz [ 337.134916][ T326] usb 4-1: SerialNumber: syz [ 337.146184][ T401] loop1: detected capacity change from 0 to 131072 [ 337.197684][ T20] usb 1-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 337.206444][ T20] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 337.229220][ T401] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 337.237634][ T401] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 337.247196][ T401] F2FS-fs (loop1): invalid crc value [ 337.251645][ T20] usb 1-1: USB disconnect, device number 2 [ 337.265967][ T401] F2FS-fs (loop1): Found nat_bits in checkpoint [ 337.269837][ T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 337.299346][ T401] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 337.306510][ T401] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 337.378306][ T287] usb 3-1: 0:2 : does not exist [ 337.386315][ T287] usb 3-1: unit 5 not found! [ 337.393577][ T287] usb 3-1: USB disconnect, device number 2 [ 337.538708][ T326] usb 4-1: USB disconnect, device number 2 [ 337.608238][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 337.767763][ T427] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 337.939663][ T437] x_tables: unsorted underflow at hook 1 [ 337.986446][ T443] SELinux: Context system_u:object is not valid (left unmapped). [ 338.000561][ T441] FAULT_INJECTION: forcing a failure. [ 338.000561][ T441] name failslab, interval 1, probability 0, space 0, times 1 [ 338.017611][ T441] CPU: 0 PID: 441 Comm: syz.3.38 Not tainted syzkaller #0 [ 338.024979][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 338.035140][ T441] Call Trace: [ 338.038434][ T441] [ 338.041398][ T441] __dump_stack+0x21/0x30 [ 338.045750][ T441] dump_stack_lvl+0x110/0x170 [ 338.050452][ T441] ? show_regs_print_info+0x20/0x20 [ 338.055771][ T441] ? proc_fail_nth_write+0x180/0x200 [ 338.061154][ T441] ? proc_fail_nth_read+0x220/0x220 [ 338.066352][ T441] ? security_file_permission+0x79/0xa0 [ 338.071991][ T441] dump_stack+0x15/0x20 [ 338.076326][ T441] should_fail+0x3c1/0x510 [ 338.081098][ T441] __should_failslab+0xa4/0xe0 [ 338.085871][ T441] should_failslab+0x9/0x20 [ 338.090383][ T441] slab_pre_alloc_hook+0x3b/0xe0 [ 338.095341][ T441] ? getname_flags+0xb9/0x500 [ 338.100034][ T441] kmem_cache_alloc+0x44/0x260 [ 338.104831][ T441] getname_flags+0xb9/0x500 [ 338.109340][ T441] user_path_at_empty+0x30/0x1c0 [ 338.114378][ T441] do_fchmodat+0xa3/0x1a0 [ 338.118732][ T441] ? do_faccessat+0xa20/0xa20 [ 338.123427][ T441] ? debug_smp_processor_id+0x17/0x20 [ 338.128801][ T441] __x64_sys_fchmodat+0x7b/0x90 [ 338.133653][ T441] x64_sys_call+0x1b7/0x9a0 [ 338.138245][ T441] do_syscall_64+0x4c/0xa0 [ 338.142661][ T441] ? clear_bhb_loop+0x50/0xa0 [ 338.147345][ T441] ? clear_bhb_loop+0x50/0xa0 [ 338.152020][ T441] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.158182][ T441] RIP: 0033:0x7f61355e6819 [ 338.162763][ T441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.183140][ T441] RSP: 002b:00007f6134041028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 338.191566][ T441] RAX: ffffffffffffffda RBX: 00007f613585ffa0 RCX: 00007f61355e6819 [ 338.199724][ T441] RDX: 000000000000017f RSI: 0000200000000300 RDI: ffffffffffffff9c [ 338.207726][ T441] RBP: 00007f6134041090 R08: 0000000000000000 R09: 0000000000000000 [ 338.215827][ T441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.223916][ T441] R13: 00007f6135860038 R14: 00007f613585ffa0 R15: 00007ffd6f42bb58 [ 338.231985][ T441] [ 338.373023][ T460] loop2: detected capacity change from 0 to 128 [ 338.553560][ T463] loop5: detected capacity change from 0 to 512 [ 338.579385][ T465] loop1: detected capacity change from 0 to 2048 [ 338.587655][ T287] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 338.630959][ T465] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 338.631060][ T463] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 338.645260][ T465] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.659769][ T463] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.694539][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 338.694553][ T30] audit: type=1400 audit(1774970001.843:177): avc: denied { mounton } for pid=462 comm="syz.5.45" path="/2/file0/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 338.698155][ T463] EXT4-fs (loop5): shut down requested (2) [ 338.704159][ T30] audit: type=1400 audit(1774970001.853:178): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 338.737044][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.752388][ T30] audit: type=1400 audit(1774970001.853:179): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.782442][ T30] audit: type=1400 audit(1774970001.853:180): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.783226][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.804038][ T30] audit: type=1400 audit(1774970001.853:181): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.834394][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.834550][ T30] audit: type=1400 audit(1774970001.853:182): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.843470][ T30] audit: type=1400 audit(1774970001.853:183): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.864598][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.887418][ T30] audit: type=1400 audit(1774970001.853:184): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 338.896417][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.918980][ T30] audit: type=1400 audit(1774970001.883:185): avc: denied { read } for pid=462 comm="syz.5.45" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.946972][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.951253][ T287] usb 1-1: Using ep0 maxpacket: 16 [ 338.960662][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.974495][ T386] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 338.983373][ T30] audit: type=1400 audit(1774970001.883:186): avc: denied { open } for pid=462 comm="syz.5.45" path="/2/file0/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 339.090303][ T328] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 339.572687][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.579934][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.587603][ T483] device bridge_slave_0 entered promiscuous mode [ 339.587750][ T287] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 339.594857][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.610731][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.613256][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.618555][ T483] device bridge_slave_1 entered promiscuous mode [ 339.627377][ T479] loop3: detected capacity change from 0 to 40427 [ 339.639219][ T287] usb 1-1: Product: syz [ 339.643413][ T287] usb 1-1: Manufacturer: syz [ 339.648060][ T287] usb 1-1: SerialNumber: syz [ 339.653645][ T287] usb 1-1: config 0 descriptor?? [ 339.670794][ T479] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 339.678401][ T479] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 339.678560][ T10] device bridge_slave_1 left promiscuous mode [ 339.691776][ T479] F2FS-fs (loop3): invalid crc value [ 339.696538][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.699176][ T479] F2FS-fs (loop3): invalid crc value [ 339.706449][ T287] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 339.711609][ T479] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 339.725449][ T477] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 339.733876][ T10] device bridge_slave_0 left promiscuous mode [ 339.740539][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.751796][ T10] device veth1_macvtap left promiscuous mode [ 339.758100][ T10] device veth0_vlan left promiscuous mode [ 339.856733][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.864076][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.871605][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.878895][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.925765][ T491] loop3: detected capacity change from 0 to 128 [ 339.935037][ T455] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 339.949977][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.958528][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.966052][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.967871][ T477] usb 3-1: Using ep0 maxpacket: 16 [ 339.980081][ T455] netlink: 'syz.0.44': attribute type 4 has an invalid length. [ 339.995433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 340.003747][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.011110][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.029543][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.038509][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.046914][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.054012][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.069767][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.078399][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.086699][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 340.095977][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 340.115395][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.124315][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.136776][ T483] device veth0_vlan entered promiscuous mode [ 340.144048][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.153059][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.153915][ T326] usb 1-1: USB disconnect, device number 3 [ 340.161398][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.175619][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.192730][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 340.201333][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 340.211549][ T483] device veth1_macvtap entered promiscuous mode [ 340.222867][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 340.231817][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 340.240780][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 340.257629][ T477] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 340.266726][ T477] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.274959][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 340.289359][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 340.297952][ T477] usb 3-1: Product: syz [ 340.302244][ T477] usb 3-1: Manufacturer: syz [ 340.306974][ T477] usb 3-1: SerialNumber: syz [ 340.328086][ T477] usb 3-1: config 0 descriptor?? [ 340.368417][ T477] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 340.426705][ T504] loop6: detected capacity change from 0 to 128 [ 340.555545][ T455] syz.0.44 (455) used greatest stack depth: 21120 bytes left [ 340.571897][ T481] netlink: 'syz.2.52': attribute type 4 has an invalid length. [ 340.606553][ T501] loop6: detected capacity change from 0 to 256 [ 340.648782][ T501] FAT-fs (loop6): bogus logical sector size 58182 [ 340.655251][ T501] FAT-fs (loop6): Can't find a valid FAT filesystem [ 340.748973][ T326] usb 3-1: USB disconnect, device number 3 [ 340.967583][ T477] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 341.327658][ T477] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.338287][ T477] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.366198][ T529] FAT-fs (loop6): bogus logical sector size 58182 [ 341.372864][ T529] FAT-fs (loop6): Can't find a valid FAT filesystem [ 341.437661][ T477] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 341.447244][ T477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 341.455514][ T477] usb 4-1: SerialNumber: syz [ 341.887454][ T477] usb 4-1: 0:2 : does not exist [ 341.900477][ T477] usb 4-1: unit 5 not found! [ 341.908003][ T477] usb 4-1: USB disconnect, device number 3 [ 342.009866][ T543] set_capacity_and_notify: 2 callbacks suppressed [ 342.009878][ T543] loop2: detected capacity change from 0 to 512 [ 342.069497][ T543] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 342.079384][ T543] EXT4-fs (loop2): Unrecognized mount option "mask=MAY_READ" or missing value [ 342.118528][ T306] udevd[306]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 342.150485][ T543] overlayfs: unrecognized mount option "verity=require" or missing value [ 342.297605][ T302] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 342.421564][ T552] loop3: detected capacity change from 0 to 128 [ 342.537789][ T302] usb 7-1: Using ep0 maxpacket: 16 [ 342.633518][ T552] loop3: detected capacity change from 0 to 256 [ 342.688596][ T552] FAT-fs (loop3): bogus logical sector size 58182 [ 342.695381][ T552] FAT-fs (loop3): Can't find a valid FAT filesystem [ 342.827649][ T302] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 342.837052][ T302] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.845856][ T302] usb 7-1: Product: syz [ 342.850480][ T302] usb 7-1: Manufacturer: syz [ 342.855104][ T302] usb 7-1: SerialNumber: syz [ 342.860595][ T302] usb 7-1: config 0 descriptor?? [ 342.898033][ T302] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 343.067581][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 343.099372][ T546] netlink: 'syz.6.68': attribute type 4 has an invalid length. [ 343.109129][ T546] netlink: 'syz.6.68': attribute type 4 has an invalid length. [ 343.274464][ T326] usb 7-1: USB disconnect, device number 2 [ 343.307541][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 343.373760][ T575] loop0: detected capacity change from 0 to 128 [ 343.565742][ T568] loop0: detected capacity change from 0 to 256 [ 343.598394][ T568] FAT-fs (loop0): bogus logical sector size 58182 [ 343.605174][ T568] FAT-fs (loop0): Can't find a valid FAT filesystem [ 343.607626][ T20] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 343.622083][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.630310][ T20] usb 3-1: Product: syz [ 343.634552][ T20] usb 3-1: Manufacturer: syz [ 343.639765][ T20] usb 3-1: SerialNumber: syz [ 343.645711][ T20] usb 3-1: config 0 descriptor?? [ 343.698480][ T20] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 343.790716][ T582] tipc: Started in network mode [ 343.795596][ T582] tipc: Node identity 4, cluster identity 4711 [ 343.801921][ T582] tipc: Node number set to 4 [ 343.900289][ T555] netlink: 'syz.2.71': attribute type 4 has an invalid length. [ 344.069318][ T20] usb 3-1: USB disconnect, device number 4 [ 344.166296][ T587] loop0: detected capacity change from 0 to 128 [ 344.509693][ T587] loop0: detected capacity change from 0 to 256 [ 344.542070][ T587] FAT-fs (loop0): bogus logical sector size 58182 [ 344.548970][ T587] FAT-fs (loop0): Can't find a valid FAT filesystem [ 344.700496][ T597] loop2: detected capacity change from 0 to 128 [ 344.847571][ T309] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 344.957999][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 344.958014][ T30] audit: type=1400 audit(1774970008.113:207): avc: denied { write } for pid=598 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.962088][ T599] loop0: detected capacity change from 0 to 1024 [ 345.073428][ T599] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 345.105862][ T599] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 345.129685][ T30] audit: type=1400 audit(1774970008.283:208): avc: denied { write } for pid=598 comm="syz.0.83" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.132034][ T599] ================================================================== [ 345.154188][ T30] audit: type=1400 audit(1774970008.283:209): avc: denied { setattr } for pid=598 comm="syz.0.83" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 345.159902][ T599] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1e04/0x3940 [ 345.159936][ T599] Read of size 18446744073709550624 at addr ffff8881147be7e0 by task syz.0.83/599 [ 345.199283][ T599] [ 345.201633][ T599] CPU: 1 PID: 599 Comm: syz.0.83 Not tainted syzkaller #0 [ 345.208762][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.218831][ T599] Call Trace: [ 345.222123][ T599] [ 345.225064][ T599] __dump_stack+0x21/0x30 [ 345.229516][ T599] dump_stack_lvl+0x110/0x170 [ 345.234214][ T599] ? show_regs_print_info+0x20/0x20 [ 345.239530][ T599] ? load_image+0x3e0/0x3e0 [ 345.244053][ T599] print_address_description+0x7f/0x2c0 [ 345.249629][ T599] ? ext4_xattr_set_entry+0x1e04/0x3940 [ 345.255307][ T599] kasan_report+0xf1/0x140 [ 345.259756][ T599] ? ext4_xattr_set_entry+0x1e04/0x3940 [ 345.265446][ T599] ? ext4_xattr_set_entry+0x1e04/0x3940 [ 345.271126][ T599] kasan_check_range+0x249/0x2a0 [ 345.276101][ T599] ? ext4_xattr_set_entry+0x1e04/0x3940 [ 345.281756][ T599] memmove+0x2d/0x70 [ 345.285680][ T599] ext4_xattr_set_entry+0x1e04/0x3940 [ 345.291077][ T599] ? ext4_xattr_ibody_set+0x360/0x360 [ 345.296619][ T599] ? __mb_cache_entry_free+0x253/0x390 [ 345.302099][ T599] ? kmem_cache_free+0x100/0x320 [ 345.307097][ T599] ? mb_cache_entry_delete_or_get+0x203/0x220 [ 345.313207][ T599] ext4_xattr_block_set+0x4f8/0x2d10 [ 345.318518][ T599] ? __kasan_check_read+0x11/0x20 [ 345.323569][ T599] ? __ext4_xattr_check_block+0x265/0x8e0 [ 345.329328][ T599] ? ext4_xattr_block_find+0x4f0/0x4f0 [ 345.334922][ T599] ext4_xattr_set_handle+0xbc4/0x12b0 [ 345.340446][ T599] ? ext4_xattr_set_entry+0x3940/0x3940 [ 345.346013][ T599] ? ext4_xattr_set+0x20c/0x320 [ 345.350983][ T599] ? __ext4_journal_start_sb+0x154/0x2b0 [ 345.356649][ T599] ext4_xattr_set+0x242/0x320 [ 345.361439][ T599] ? ext4_xattr_set_credits+0x290/0x290 [ 345.366997][ T599] ? selinux_inode_setxattr+0x5d9/0xc00 [ 345.372609][ T599] ext4_xattr_trusted_set+0x3c/0x50 [ 345.377901][ T599] ? ext4_xattr_trusted_get+0x40/0x40 [ 345.383274][ T599] __vfs_setxattr+0x3e1/0x430 [ 345.387956][ T599] __vfs_setxattr_noperm+0x12a/0x5e0 [ 345.393294][ T599] __vfs_setxattr_locked+0x212/0x230 [ 345.398668][ T599] vfs_setxattr+0x167/0x2e0 [ 345.403257][ T599] ? xattr_permission+0x550/0x550 [ 345.408364][ T599] ? _copy_from_user+0x95/0xd0 [ 345.413126][ T599] setxattr+0x36c/0x390 [ 345.417310][ T599] ? path_setxattr+0x290/0x290 [ 345.422100][ T599] ? debug_smp_processor_id+0x17/0x20 [ 345.427488][ T599] ? __mnt_want_write+0x1e6/0x260 [ 345.432524][ T599] ? mnt_want_write+0x20b/0x2e0 [ 345.437373][ T599] path_setxattr+0x147/0x290 [ 345.441965][ T599] ? simple_xattr_list_add+0x120/0x120 [ 345.447437][ T599] ? __kasan_check_write+0x14/0x20 [ 345.452820][ T599] __x64_sys_lsetxattr+0xc2/0xe0 [ 345.457759][ T599] x64_sys_call+0x8cc/0x9a0 [ 345.462440][ T599] do_syscall_64+0x4c/0xa0 [ 345.466860][ T599] ? clear_bhb_loop+0x50/0xa0 [ 345.471557][ T599] ? clear_bhb_loop+0x50/0xa0 [ 345.476579][ T599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.482558][ T599] RIP: 0033:0x7f96bfa2b819 [ 345.487103][ T599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.506980][ T599] RSP: 002b:00007f96be486028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 345.515566][ T599] RAX: ffffffffffffffda RBX: 00007f96bfca4fa0 RCX: 00007f96bfa2b819 [ 345.523656][ T599] RDX: 0000200000000500 RSI: 0000200000000300 RDI: 0000200000000040 [ 345.531628][ T599] RBP: 00007f96bfac1c91 R08: 0000000000000000 R09: 0000000000000000 [ 345.539706][ T599] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 345.547679][ T599] R13: 00007f96bfca5038 R14: 00007f96bfca4fa0 R15: 00007ffe60d8ee58 [ 345.555745][ T599] [ 345.558764][ T599] [ 345.561083][ T599] The buggy address belongs to the page: [ 345.566706][ T599] page:ffffea000451ef80 refcount:2 mapcount:0 mapping:ffff88810930cb98 index:0x1c pfn:0x1147be [ 345.577253][ T599] memcg:ffff88810df36780 [ 345.581721][ T599] aops:def_blk_aops ino:700000 [ 345.586493][ T599] flags: 0x400000000000203a(referenced|dirty|lru|active|private|zone=1) [ 345.594843][ T599] raw: 400000000000203a ffffea0004a264c8 ffffea00043d4688 ffff88810930cb98 [ 345.603532][ T599] raw: 000000000000001c ffff88811295d7e0 00000002ffffffff ffff88810df36780 [ 345.612111][ T599] page dumped because: kasan: bad access detected [ 345.618522][ T599] page_owner tracks the page as allocated [ 345.624316][ T599] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 599, ts 345129920546, free_ts 345124117212 [ 345.641594][ T599] post_alloc_hook+0x192/0x1b0 [ 345.646463][ T599] prep_new_page+0x1c/0x110 [ 345.650963][ T599] get_page_from_freelist+0x2d3a/0x2dc0 [ 345.656511][ T599] __alloc_pages+0x1a2/0x460 [ 345.661101][ T599] pagecache_get_page+0xac6/0xde0 [ 345.666127][ T599] __getblk_gfp+0x238/0x7d0 [ 345.670664][ T599] ext4_xattr_block_set+0x1d7c/0x2d10 [ 345.676101][ T599] ext4_xattr_set_handle+0xbc4/0x12b0 [ 345.681532][ T599] ext4_xattr_set+0x242/0x320 [ 345.686229][ T599] ext4_xattr_user_set+0xc4/0xf0 [ 345.691278][ T599] __vfs_setxattr+0x3e1/0x430 [ 345.695974][ T599] __vfs_setxattr_noperm+0x12a/0x5e0 [ 345.701491][ T599] __vfs_setxattr_locked+0x212/0x230 [ 345.706787][ T599] vfs_setxattr+0x167/0x2e0 [ 345.711391][ T599] setxattr+0x36c/0x390 [ 345.715545][ T599] path_setxattr+0x147/0x290 [ 345.720132][ T599] page last free stack trace: [ 345.724808][ T599] free_unref_page_prepare+0x542/0x550 [ 345.730288][ T599] free_unref_page_list+0x13a/0x9d0 [ 345.735543][ T599] release_pages+0x1006/0x1060 [ 345.740316][ T599] free_pages_and_swap_cache+0x86/0xa0 [ 345.745871][ T599] tlb_finish_mmu+0x17e/0x310 [ 345.750557][ T599] unmap_region+0x344/0x3b0 [ 345.755282][ T599] __do_munmap+0xa24/0x1020 [ 345.759787][ T599] __vm_munmap+0x163/0x2b0 [ 345.764201][ T599] __x64_sys_munmap+0x6b/0x80 [ 345.768876][ T599] x64_sys_call+0xc9/0x9a0 [ 345.773380][ T599] do_syscall_64+0x4c/0xa0 [ 345.777936][ T599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.783828][ T599] [ 345.786224][ T599] Memory state around the buggy address: [ 345.791959][ T599] ffff8881147be680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.800019][ T599] ffff8881147be700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.808105][ T599] >ffff8881147be780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.816157][ T599] ^ [ 345.823440][ T599] ffff8881147be800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.831518][ T599] ffff8881147be880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 345.839630][ T599] ================================================================== [ 345.847710][ T599] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.862027][ T30] audit: type=1400 audit(1774970009.003:210): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14877]" dev="pipefs" ino=14877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 346.060363][ T8] tipc: Left network mode [ 346.117631][ T309] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 346.125328][ T309] usb 7-1: can't read configurations, error -71 [ 346.177453][ T281] syz-executor (281) used greatest stack depth: 21056 bytes left [ 347.098157][ T8] device bridge_slave_1 left promiscuous mode [ 347.104343][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.111957][ T8] device bridge_slave_0 left promiscuous mode [ 347.118154][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.125996][ T8] device veth1_macvtap left promiscuous mode [ 347.132037][ T8] device veth0_vlan left promiscuous mode [ 347.742572][ T8] tipc: Left network mode [ 348.738480][ T8] device bridge_slave_1 left promiscuous mode [ 348.744698][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.752424][ T8] device bridge_slave_0 left promiscuous mode [ 348.758762][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.766980][ T8] device bridge_slave_1 left promiscuous mode [ 348.773263][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.780800][ T8] device bridge_slave_0 left promiscuous mode [ 348.786909][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.795019][ T8] device bridge_slave_1 left promiscuous mode [ 348.801351][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.809104][ T8] device bridge_slave_0 left promiscuous mode [ 348.815240][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.823064][ T8] device bridge_slave_1 left promiscuous mode [ 348.829307][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.836794][ T8] device bridge_slave_0 left promiscuous mode [ 348.843003][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.851175][ T8] device veth1_macvtap left promiscuous mode [ 348.857178][ T8] device veth0_vlan left promiscuous mode [ 348.863240][ T8] device veth1_macvtap left promiscuous mode [ 348.869271][ T8] device veth0_vlan left promiscuous mode [ 348.875178][ T8] device veth1_macvtap left promiscuous mode [ 348.881225][ T8] device veth0_vlan left promiscuous mode [ 348.887079][ T8] device veth1_macvtap left promiscuous mode [ 348.893467][ T8] device veth0_vlan left promiscuous mode