last executing test programs: 9m1.690280148s ago: executing program 0 (id=541): socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f0000000180)=""/111}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 8m58.855610504s ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f00000046c0)=@newtaction={0x48, 0x58, 0x284f, 0x0, 0x0, {}, [{0xe, 0x1, [@m_simple={0x30, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r7, &(0x7f00000016c0)=[{{&(0x7f0000000f80), 0x6e, &(0x7f0000001300)=[{&(0x7f0000001000)=""/129, 0x81}, {&(0x7f00000010c0)=""/179, 0xb3}, {&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/63, 0x3f}], 0x5, &(0x7f0000001380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001400)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)}, {&(0x7f00000014c0)=""/216, 0xd8}], 0x2, &(0x7f0000001600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}}], 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@nobh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") 8m51.758082029s ago: executing program 0 (id=551): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2052809, 0x0, 0xf9, 0x0, 0x0) capset(0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8m49.773230111s ago: executing program 0 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{r5, r6/1000+10000}, {0x0, 0x2710}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") 8m47.028923526s ago: executing program 0 (id=559): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2c}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r4}, 0x38) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r7, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000380)='bpf_lsm_inode_rmdir\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x20, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x2, 0x1, 0x3, 0x50, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x6e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0xc, &(0x7f00000002c0)=""/12, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x0, 0x1}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x0, 0x10, 0x52f}, 0x94) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) 8m46.848573609s ago: executing program 0 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002e40)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000002e00)='\xcb\x85\x1by\t\xfd\x91\x89\xa3\x8d\x8f\xd3\xe8\'\x02') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 8m46.821342099s ago: executing program 32 (id=560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002e40)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000002e00)='\xcb\x85\x1by\t\xfd\x91\x89\xa3\x8d\x8f\xd3\xe8\'\x02') write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x200000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) 8m44.682115094s ago: executing program 3 (id=567): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) socket(0x10, 0x803, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 8m43.71289918s ago: executing program 3 (id=569): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) read$FUSE(r5, &(0x7f00000093c0)={0x2020}, 0x2020) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000001, 0x0, 0x0, 0x3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003b80)=@newtaction={0x18, 0x5a, 0x301, 0x40000, 0x0, {0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020}, 0x2004e080) 8m40.719766618s ago: executing program 3 (id=573): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x108) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2020) write$FUSE_INIT(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, 0x0, 0xa4901, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1886dd6500004080000000000000000000000000003400"/43], 0x0) 8m39.013953306s ago: executing program 3 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000400)={{r5, r6/1000+10000}, {0x0, 0x2710}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x18) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") 8m35.594526881s ago: executing program 3 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x5, &(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYBLOB]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000540)='./cgroup/../file0\x00') r5 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8m35.415288045s ago: executing program 3 (id=584): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xffffffffffffffe7, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3688a80000080600"], 0x0) 8m35.200301628s ago: executing program 33 (id=584): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0xffffffffffffffe7, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3688a80000080600"], 0x0) 13.671535348s ago: executing program 1 (id=2504): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@nouid32}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={r5, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x4, 0x234, 0x0, 0x6, 0x3, 0x9, 'syz0\x00'}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") 12.570309576s ago: executing program 5 (id=2506): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 12.500705847s ago: executing program 4 (id=2508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="240100001800090400000000000000000a000000000000000000000008001e0001000000"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0x2, 0x3, 0x80000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) r8 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) 12.154521322s ago: executing program 6 (id=2509): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') rt_tgsigqueueinfo(0x0, r0, 0x1a, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x147440, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 11.939290026s ago: executing program 1 (id=2510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xa721) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) 11.488605274s ago: executing program 2 (id=2511): syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) flock(r0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0xee01) 11.487877654s ago: executing program 4 (id=2512): pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) listen(0xffffffffffffffff, 0x0) 8.64303325s ago: executing program 2 (id=2513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000340)={[{@delalloc}, {@noquota}, {@i_version}, {@usrjquota}, {@data_ordered}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x2}}, {@block_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@dont_measure}]}, 0x0, 0x607, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',posixacl']) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5b32034f40ccc410, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x10e8, 0x1000, &(0x7f0000001100)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) write(0xffffffffffffffff, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 8.64089409s ago: executing program 6 (id=2514): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$netlink(0x10, 0x3, 0x15) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x201408c, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r2, &(0x7f0000000240)='./file0/bus\x00', 0x44000000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = dup2(r0, r1) close_range(r5, 0xffffffffffffffff, 0x0) 8.59529434s ago: executing program 5 (id=2515): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c084, &(0x7f0000000540)={[{@i_version}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}], [{@dont_appraise}]}, 0xfd, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 8.575096271s ago: executing program 1 (id=2516): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)}, {0x0}], 0x2}}], 0x1, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='trusted.overlay.redirect\x00', &(0x7f0000000480)='V\x00', 0x2, 0x1) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}}, 0x804) sendfile(r7, r8, 0x0, 0x20000023896) 8.339697815s ago: executing program 4 (id=2517): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e00, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b\x00', 0x2}], 0x1, &(0x7f0000000180)=ANY=[], 0x30}, 0x48d0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, 0x0, 0x4000) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r7) 7.595747897s ago: executing program 2 (id=2518): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x80440, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32], 0x0}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x8f}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 7.564482707s ago: executing program 5 (id=2528): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x1a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa08000000ee3620"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x15) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x8, 0x4, 0x0, 0x0, 0x0, 0x68, 0x6, 0x0, 0x4, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x4}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) 7.514141418s ago: executing program 6 (id=2519): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20000078}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") 6.197618319s ago: executing program 2 (id=2520): pipe(&(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) io_setup(0x20, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', 0x0}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) fdatasync(r2) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 6.196638159s ago: executing program 4 (id=2521): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) 6.17943508s ago: executing program 1 (id=2522): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)}, {0x0}], 0x2}}], 0x1, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='trusted.overlay.redirect\x00', &(0x7f0000000480)='V\x00', 0x2, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x30}}, 0x804) sendfile(r6, r7, 0x0, 0x20000023896) 3.324894786s ago: executing program 1 (id=2523): recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000395000/0x3000)=nil, 0x3000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.324400946s ago: executing program 6 (id=2524): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklySVJkpA7CUmSJEnikFsSkpDrSXIPuaeTjvv9knvSyStJkpCQZH3jdPn8ey//3vf99//0vWf+xtjjrPnsPdee68zxnGfvPcZ5vuo2vHqjGlXqMzP8O/SvA/z5RxIAJADAIADIAQABAJTNWTZn+v4sGpP+rZOI/yUNZl7pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ux8V8uWcTd5/v//OfU/SZbP/wwB/9EO6f9/Gv0vHS39z9ik/xmb9D9jk/5nZMGVLkBcYfL+z9ik/0JkaH/4M+WN56/0M23Z/oVNCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYT4f+C8v8wAwK/jK12XEEIIIYQQQggh/jj+nStdgRBCCCGEEEIIIf73ISjQYCCATJAZEiALJMJVkBWyQXbIATG4GnLCNZALroXckAfyQj7IDwWgIIRAYIEhgkJQGOJwHRSB66EoFIPiUAIclIRScAOUhhuhDNwEZeFmKAe3QHmo8NM5090OleEOqAJ3QlWoBtWhBtwFNeFuqAX3QG24F+rAfVAX7od68ADUhwbQEB6ERtAYmkBTaAbNoQW0hFa/k5+c4+/lPwc94XnoBb0hCfpAX3gB+kF/GAADYRC8CIPhJRgCL8NQGAbD4RUYAa/CSHgNRsFoGAOvw1gYB+NhAkyESZAMb8BkeBOmwFuNs8E0mA4zYCbMgtnwNsyBuTAP3oH5sAAWQnKWxbAElsK7sAzegxR4H5bDB5AKK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fwg7YCbtgN+yBvbAPPoL98DEcgE8gDT/9F/PP/TYfuiMgoEKFBg1mwkyYgAmYiImYFbNidsyOMYxhTsyJuTAX5sbcmBfzYhLmx4JYEAkJGRkLYSGMYxyLYBEsikWxOBZHhw5LYSksjTdiGSyDZbEslsNyWB4rYAW8FW/FSlgJK2NlrIJVsCpWxepYHe/Cu/BurIW1sDbWxjpYB+tiXayH9bA+1seG2BAbYSNsgk2wGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHbAjdsRO2Ak7Y2fsgl2wK3bFbtgNu+Oz+Cw+h8/h8/g89saqqg/2xb7YD/vhAByIA/FFHIwv4Uv4Mg7FYTgcX8FX8FUciWdxFI7GMTgGK6lxOB4nIKtJmIzJmBkm4xScglNxGk7DGTgTZ+FsnI1zcC7OxXdwPi7ABbgIF+ESXIpLcRm+hymYgsvxHKbiClyJq3A1rsHVuA7X4zrciJtwI27BLbgNt+GH+CHuxJ24G3fjXtyLH+FH+DF+jEMxDdPwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPABcwAt4ES/iJbyU/uZX6YwyKpPKpBJUgkpUiSqryqqyq+wqpmIqp8qpcqlcKrfKrfKqvCq/yq8KqoKKFClWkSqkCqm4iqsiqogqqoqq4qq4csqpUqqUKq1KqzKqjCqrblbl1C2qvKqg2rpb1a2qkmrnKqs7VBVVRVVV1VR1VUPVUDVVTVVL1VK1VW1VR9VRddX9qp7qgwOwgUrvTCM1DJuo4dhMNVctVEv1Kj6kWquR2Ea1Ve3UI2o0jsIOqrXrqB5XndR47KyeVBPwKdVVTcJu6hnVXT2reqjnVE/VxvVSvdVU7KP6qhnYT/VXA9RANQerqfSOVVcvq+cyD1PD1StqCb6qRqrX1Cg1Wo1Rr6uxapwaryaoiWqSSlZvqMnqTTVFvaWmqmlqupqhZqpZarZ6W81Rc9U89Y6arxaohWqRWqyWqKXqXbVMvadS1PtqufpApaoVaqVapVarNWqtWqfWqw1qo9qkNqstaqvaprarD9UOtVPtUrvVHrVX7VMfqf3qY3VAfaLS1KfqoPqLOqQ+U4fV5+qI+kIdVV+qY+ordVx9rU6ob9RJdUqdVt+qM+o7dVadU+fV9+qC+kFdVD+qS8or0KiV1troQGfSmXWCzqIT9VU6q86ms+scOqav1jn1NTqXvlbn1nl0XpNP59cFdEEdatJWs450IV1Yx/V1uoi+XhfVxXRxXUI7XVKX0jfo0vpGXUbfpMvqm3U5fYsuryvoih70bbqSvl1X1nfoKvpOXVVX09V1DX2Xrqnv1rX0Pbq2vlfX0ffpuvp+XU8/oOvrBrqhflA30o11E91UN9PNdQvdUrfSD+nW+mHdRrfV7fQjur1+VHfQj+mO+nHdST+hO+sndRf9lO6qn9bd9DO6u35W99A/6kva6166t07SfXRf/YLup/vrAXqgHqRf1IP1S3qIflkP1cP0cP2KHqFf1SP1a3qUHq3H6Nf1WD1Oj9cT9EQ9SSfrN/Rk/aaeot/SU/U0PV3P0DP1LD3gl5nm/RP5b/6d/CE/nX2b3q4/1Dv0Tr1L79Z79F69T+/T+/V+fUAf0Gk6TR/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfUKf1Kf09/pbfUZ/p8/qc/qc/l5f0Bf0xV9+B2DQKKONMYHJZDKbBJPFJJqrTFaTzWQ3OUzMXG1ymmtMLnOtyW3ymLwmn8lvCpiCJjRkrGETmUKmsImb60wRc70paoqZ4qaEcaakKWVu+B/n/159rUwr09q0Nm1MG9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PFdDFdTVfTzXQz3U1308P0MD1NT9PL9DJJJsn0NS+Yfqa/GWAGmkHmRTPYDDZDzBAz1Aw1w81wM8KMMCPNSDPKjDJjzBgz1ow14814M9FMNMk+h5lsJpspZoqZaqaa6YNymJlmppltZps5Zo6ZZ+aZ+Wa+WWgWmsVmsVlqlpplZplJMSlmuVluUs0Ks8KsMqvMGrPGrDPrzAazwWwym8wWs8Wkmu1mu9lhdphdZpfZY/aYfWaf2W/2mwPmgEkzaeagOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmpDlpTpvT5ow5Y86as+a8OW8umAvmorloLplL6Zd9gQpUYAITZAoyBQlBQpAYJAZZg6xB9iB7EAtiQc4gZ5AruDbIHeQJ8gb5gvxBgaBgEAYU2ICDKCgUFA7iwXVBkeD6oGhQLCgelAhcUDIoFdwQlA5uDMoENwVlg5uDcsEtQfmgQlAxuDW4LagU3B5UDu4IqgR3BlWDakH1oEZwV1AzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf2gQdAweDBoFDQOmgRNg2ZB86BF0DJo9YfO7/3ZPA+7XmHvMCnsE/YNXwj7hf3DAeHAcFD4Yjg4fCkcEr4cDg2HhcPDV8IR4avhyPC1cFQ4OhwTvh6ODceF48MJ4cRwUpgcvhFODt8Mp4RvhVPDaeH0YEY4M5wVzg7fDueEc8N54Tvh/HBBuDBcFC4Ol4T48yUxpITvh8vDD8LUcEW4MlwVrg7XhGvDdeH6cEO4MdwUbg63lB3886HhjnBnuCvcHe4J94b7wo/C/eHH4YHwkzAt/DQ8GP4lPBR+Fh4OPw+PhF+ER8Mvw2PhV+Hx8OvwRPhNeDI8FZ4Ovw3PhN+FZ8Nz4fnw+/BC+EN4MfwxvBT69Iv79I93MmQoE2WiBEqgREqkrJSVslN2ilGMclJOykW5KDflpryUl/JTfipIBSkdE1MhKkRxilMRKkJFqSgVp+LkyFEpKkWlqTSVoTJUlspSOSpH5ak8VaSKdBvdRrfT7XQH3UF30p1UjapRDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lNDakiNqBE1oSbUjJpRC2pBragVtabW1IbaUDtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak79aAe1JN6Ui/qRUmURH2pL/WjfjSABtAgGkSDaTANoSE0lIbScBpOI2gEjaSRNIpG0xh6ncbSOBpPE2giTaJkSqbJNJmm0BSaSlNpOk2nmTSTZtNsmkNzaB7No/k0nxbSQlpMi2kpLaVltIxSKIWW03JKpVRaSStpNa2mtbSW1tN62kgbaTNtpq20lbbTdtpBO2gX7aI9tIf20T7aT/vpAB2gNEqjg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaCTdJJO02k6Q2foLJ2l83SeLtAPdJF+pEvkKcFmsYn2KpvVZrPZbQ7713Fem8/mtwVsQRva3DbPb2Ky1ha1xWxxW8I6W9KWsjf8TVzeVrAV7a32NlvJ3m4r2/I2C/zXuKa929ay99ja9l5bw971m7iOvc/WtY1tPdvU1rfNbUPb0jayjW0T29Q2s81tC9vStreP2g72MdvRPm472Sf+Jl5m37Pr7Qa70W6y++3H9rz93h6zX9kL9gfby/a2g+yLdrB9yQ6xL9uhdthvYwA7xr5ux9pxdrydYCfaSX8TT7cz7Ew7y862b9s5du7fxEvtu3a+TbEL7SK72C75KU6vKcW+b5fbD2yqXWFX2lV2tV1j19p1/7fWVXaL3Wq32X32I7vD7rS77G67x+79KU5fxwH7iU2zn9qj9kt7yH5mD9vj9oj94qc4fX3H7df2hP3GnrSn7Gn7rT1jv7Nn7bmf1p++9m/tj/aS9RYYWbFmwwFn4sycwFk4ka/irJyNs3MOjvHVnJOv4Vx8LefmPJyX83F+LsAFOWRiy8wRF+LCHOfruAhfz0W5GBfnEuy4JJfiG7g038hl+CYuyzdzOb6Fy3MFrsi38m1ciW/nynwHV+E7uSpX4+pcg+/imnw31+J7uDbfy3X4Pq7L93M9foDrcwNuyA9yI27MTbgpN+Pm3IJbcit+iFvzw9yG23I7foTb86PcgR/jjvw4d+InuDM/yV34Ke7KT3M3foa787Pcg5/jnvw89+LenMR9uC+/wP24Pw/ggTyIX+TB/BIP4Zd5KA/j4fwKj+BXeSS/xqN4NI/h13ksj+PxPIEn8iRO5jd4Mr/JU/gtnsrTeDrP4Jk8i2fz2zyH5/I8fofn8wJeyIt4MS/hpfwuL+P3OIXf5+X8AafyCl7Jq3g1r+G1vI7X8wbeyJt4M2/hrbyNt/OHvIN38i7ezXt4L+/jj3g/f8wH+BNO40/5IP+FD/FnfJg/5yP8BR/lL/kYf8XH+Ws+wd/wST7Fp/lbPsPf8Vk+x+f5e77AP/BF/pEvsWeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ixlGTqGnULGoetYhaRq2ih6LW0cNRm6ht1C56JGofPRp1iB6LOkaPR52iJy7vLxb8/Gn6V/uToj6R/uUJ2T16cXxJfGn83fiy+Hvxxt1+fjU1viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Nb4t7n2NzOAw/UYYjAtcJpfZJbgsLtFd5bK6bC67y+Fi7mqX013jcrlrXW6Xx+V1+Vx+V8AVdKEjZx27yBVyhV3cXeeKuOtdUVfMFXclnHMlXSnX0rVyrVxr97Br49q6du4R94h71D3qHkv4pXDX2T3purinXFf3tHvaPeO6u2ddD/ec6+med71cb5fkklxf19f1c/3cADfADXKD3GA32A1xQ9xQN9QNd8PdCDfCjXQj3Sg3yo1xY9xYN9aNd+PdRDfRJbtkN9lNdlPcFDfVTXXT3XQ30810s91sN8fNcfPcPDffzXcL3UK32C12S91St8wtcykuxS13y12qS3Ur3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1waS7NHXQH3SF3yB12n7sj7gt31H3pjrmv3HH3tTvhvnEn3Sl32nl9xn3nzrpz7rz73l1wP7iL7kd3yXmXHHsjNjn2ZmxK7K3Y1Ni02PTYjNjM2KzY7NjbsTmxubF5sXdi82MLYgtji2KLY0tiS2PvxpbF3oulxN6PLY99EEuNrYitjK2KrY6tiXlfYEfkC/nCPu6v80X89b6oL+aL+xLe+ZK+lL/Bl/Y3+jL+Jl/W3+zL+Vt8eV/BV/RNfTPf3LfwLX0r/5Bv7R/2bXxb384/4tv7R30H/5jv6B/3nfwTvrN/0nfxT/mu/mnfzT+z4Jcu+57+ed/L9/ZJvo/v61/w/Xx/P8AP9IP8i36wf8kP8S/7oX6YH+5f8SP8q36kf82P8qP9GP+6H+vH+fF+gp/oJ/lk/4af7N/0U/xbfqqf5qf7GX6mn+Vn+7f9HD/Xz/Pv+Pl+gV/oF/nFfolf6t/1y/x7PsW/75f7D3yqX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u//Q7/A7/S6/2+/xe/0+/5Hf7z/2B/wnPs1/6g/6v/hD/jN/2H/uj/gv/FH/pT/mv/LH/df+hP/Gn/Sn/Gn/rT/jv/Nn/Tl/3n/vL/gf/EX/o78k/7MmhBBCCPFP0b+zv8/feU39sqXrCwDZduY78tdzbs7987i/2t8pBgCP9+7W4NetQYOkpKRfjk3VEBReBACxy/k/ff/AL/EKaAePQkdoC6X/bn39VcWfrvv+u/njNwMkAmT5NSf99igR/nr+G//B/E3f5d+bfxFA0cKXc9JP9Gt8ef4y/2D+ve1/Z/4snyUDtPkvOVnhcnx5/lLwMDwBHX9zpBBCCCGEEEII8bP+6kL337u/Tb8/z28u52SGy/Hv3Z//jsp/xBqEEEIIIYQQQgjx33vq2R6PPdSxY9su/8mDzH+OMv4EAwSAP0EZMvjzD670XyYhhBBCCCHEH+3yRf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi4/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfZ/AgAA///M7VMc") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') rt_tgsigqueueinfo(0x0, r0, 0x1a, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x147440, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 3.316335536s ago: executing program 5 (id=2525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) alarm(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000130a010200000000000000000000090900010073797a31000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x80, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) 3.263421597s ago: executing program 4 (id=2526): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461fb6c3d302c636865636b3d7374726958571d744ce34ff0352c73686f72746e616d653d77696e3948b3636f6465706167653d3934392c726f6469722c616cc4d69ace3d959de5c5d73b52cb86f97b6c6f775f7574696d653d303030303030301a3030303030303030303137373737372c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c696f636861727365743d63703934392c6e6f6e750000000019b604532c"], 0x25, 0x34c, &(0x7f0000001740)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0xc0028, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRESHEX, @ANYBLOB="1c24cfa83d58d76fc196001d221710b3096ab9c51fc1ac"]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.716756932s ago: executing program 6 (id=2527): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r7, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r8, 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) 1.711972932s ago: executing program 5 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000300)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x35}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}]}, 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x138) unshare(0x62040200) 1.711544152s ago: executing program 4 (id=2530): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$netlink(0x10, 0x3, 0x15) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x201408c, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x1b, 0x76, 0x36, 0x20, 0x525, 0x9901, 0x3975, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x84, 0x4, 0x2, 0xc4, 0xc6, 0x1f, 0x0, [], [{{0x9, 0x5, 0xc, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r2, &(0x7f0000000240)='./file0/bus\x00', 0x44000000) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = dup2(r0, r1) close_range(r5, 0xffffffffffffffff, 0x0) 1.626405113s ago: executing program 2 (id=2531): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000180), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[@ANYBLOB="8baaaaaaaaaa00000000000008004500001c000000000033907800000000ffffffffc8bf066eaa0020000000089078"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) fsmount(0xffffffffffffffff, 0xdfd72f8b669113ff, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 109.094808ms ago: executing program 5 (id=2532): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) 108.623658ms ago: executing program 6 (id=2533): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x80440, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32], 0x0}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x8f}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 61.743699ms ago: executing program 2 (id=2534): recvmmsg(0xffffffffffffffff, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r5 = socket$inet_udp(0x2, 0x2, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000395000/0x3000)=nil, 0x3000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 0s ago: executing program 1 (id=2535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000004000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a02000000000026"], 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback, 0x0, 0x748edea03e882694, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) kernel console output (not intermixed with test programs): bridge1 entered promiscuous mode [ 352.657013][ T3516] F2FS-fs (loop5): Found nat_bits in checkpoint [ 352.690694][ T3516] F2FS-fs (loop5): Mounted with checkpoint version = 1b41e955 [ 352.790415][ T1583] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 354.811040][ T1006] usb 3-1: device descriptor read/all, error -71 [ 354.890242][ T1583] usb 5-1: Using ep0 maxpacket: 16 [ 355.772700][ T1583] usb 5-1: device descriptor read/all, error -71 [ 356.367347][ T3558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.747'. [ 356.400909][ T3558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3558 comm=syz.4.747 [ 357.723204][ T3557] netlink: 'syz.2.748': attribute type 4 has an invalid length. [ 358.100960][ T28] audit: type=1400 audit(1750941391.455:759): avc: denied { write } for pid=3561 comm="syz.6.750" name="route" dev="proc" ino=4026532311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 358.213907][ T28] audit: type=1400 audit(1750941391.565:760): avc: denied { ioctl } for pid=3561 comm="syz.6.750" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26014 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 358.463224][ T3580] loop5: detected capacity change from 0 to 512 [ 358.511331][ T3580] EXT4-fs (loop5): Test dummy encryption mode enabled [ 358.645464][ T3580] EXT4-fs error (device loop5): __ext4_iget:5078: inode #11: block 1: comm syz.5.751: invalid block [ 358.659582][ T3580] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.751: couldn't read orphan inode 11 (err -117) [ 358.672268][ T3580] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 358.900319][ T1006] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.566325][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 359.572193][ T1006] usb 7-1: device descriptor read/64, error -71 [ 360.537281][ T3600] loop4: detected capacity change from 0 to 8192 [ 360.601620][ T28] audit: type=1400 audit(1750941393.955:761): avc: denied { connect } for pid=3598 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.001947][ T28] audit: type=1400 audit(1750941393.975:762): avc: denied { bind } for pid=3598 comm="syz.4.759" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 361.154768][ T28] audit: type=1400 audit(1750941393.975:763): avc: denied { node_bind } for pid=3598 comm="syz.4.759" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 361.736099][ T3618] device bridge0 entered promiscuous mode [ 362.924041][ T3627] device bridge2 entered promiscuous mode [ 363.138205][ T3630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.763'. [ 363.846492][ T3634] loop5: detected capacity change from 0 to 512 [ 363.892000][ T3634] EXT4-fs (loop5): Test dummy encryption mode enabled [ 363.953992][ T3638] loop6: detected capacity change from 0 to 256 [ 363.963784][ T3634] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 363.974370][ T3638] FAT-fs (loop6): Unrecognized mount option "" or missing value [ 363.990730][ T3634] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.764: bad orphan inode 131083 [ 364.070238][ T28] audit: type=1400 audit(1750941397.405:764): avc: denied { remount } for pid=3635 comm="syz.1.766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.100907][ T3634] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 364.249888][ T28] audit: type=1326 audit(1750941397.595:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3637 comm="syz.6.768" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x0 [ 365.240525][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 365.250254][ T28] audit: type=1400 audit(1750941398.595:766): avc: denied { write } for pid=3654 comm="syz.1.772" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 366.446277][ T3666] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 368.756114][ T3678] device bridge1 entered promiscuous mode [ 368.784843][ T3681] device bridge2 entered promiscuous mode [ 370.840191][ T310] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 371.481144][ T28] audit: type=1400 audit(1750941404.835:767): avc: denied { listen } for pid=3691 comm="syz.6.781" path="/35/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 372.134283][ T310] usb 6-1: device descriptor read/64, error -71 [ 373.221860][ T28] audit: type=1400 audit(1750941406.285:768): avc: denied { write } for pid=3713 comm="syz.2.785" name="file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.288280][ T3728] device bridge2 entered promiscuous mode [ 373.301513][ T3730] loop4: detected capacity change from 0 to 256 [ 373.324091][ T28] audit: type=1400 audit(1750941406.285:769): avc: denied { open } for pid=3713 comm="syz.2.785" path="/151/file0" dev="tmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 373.360197][ T28] audit: type=1400 audit(1750941406.355:770): avc: denied { ioctl } for pid=3713 comm="syz.2.785" path="/151/file0" dev="tmpfs" ino=846 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 374.871382][ T3730] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 374.882227][ T3730] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 374.893369][ T3730] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 374.913375][ T3738] loop2: detected capacity change from 0 to 256 [ 375.002899][ T3738] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 375.013818][ T3738] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 375.022594][ T3738] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x114aabd0, checksum : 0x1119abd0) [ 375.035538][ T3738] exFAT-fs (loop2): invalid boot region [ 375.041308][ T3738] exFAT-fs (loop2): failed to recognize exfat type [ 375.116284][ T3745] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 375.140960][ T28] audit: type=1400 audit(1750941408.485:771): avc: denied { bind } for pid=3735 comm="syz.5.791" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 375.500674][ T28] audit: type=1400 audit(1750941408.485:772): avc: denied { node_bind } for pid=3735 comm="syz.5.791" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 375.549354][ T3749] device bridge3 entered promiscuous mode [ 376.603916][ T3757] loop5: detected capacity change from 0 to 1024 [ 376.631448][ T3757] EXT4-fs: Ignoring removed nobh option [ 376.646168][ T3757] EXT4-fs: Ignoring removed bh option [ 376.661940][ T3757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 376.705879][ T3757] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 376.723152][ T28] audit: type=1326 audit(1750941410.035:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.069451][ T28] audit: type=1326 audit(1750941410.035:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.095258][ T28] audit: type=1326 audit(1750941410.035:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.366494][ T28] audit: type=1326 audit(1750941410.035:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.389930][ T28] audit: type=1326 audit(1750941410.035:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.419039][ T28] audit: type=1326 audit(1750941410.035:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.473927][ T28] audit: type=1326 audit(1750941410.035:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.482113][ T1006] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 377.506701][ T28] audit: type=1326 audit(1750941410.035:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 377.542077][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 377.686964][ T28] audit: type=1326 audit(1750941410.035:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 378.104333][ T28] audit: type=1326 audit(1750941410.035:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3759 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 378.844852][ T3786] device bridge2 entered promiscuous mode [ 379.561861][ T3790] loop4: detected capacity change from 0 to 128 [ 379.569990][ T3790] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 379.579682][ T1006] usb 3-1: Using ep0 maxpacket: 8 [ 379.592462][ T3790] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.619889][ T1006] usb 3-1: device descriptor read/all, error -71 [ 380.723954][ T3808] loop2: detected capacity change from 0 to 256 [ 380.904883][ T3809] loop5: detected capacity change from 0 to 128 [ 381.804914][ T285] EXT4-fs (loop4): unmounting filesystem. [ 381.882623][ T3809] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 381.891850][ T3809] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 382.285607][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 382.297195][ T3817] device bridge4 entered promiscuous mode [ 383.671098][ T3840] loop2: detected capacity change from 0 to 512 [ 383.683388][ T3840] EXT4-fs: Ignoring removed bh option [ 383.735640][ T3840] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 384.650060][ T3843] loop4: detected capacity change from 0 to 256 [ 385.563951][ T3838] loop5: detected capacity change from 0 to 8192 [ 386.206572][ T3840] EXT4-fs (loop2): 1 truncate cleaned up [ 386.212422][ T3840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 386.256630][ T3839] overlayfs: missing 'workdir' [ 387.117095][ T286] EXT4-fs (loop2): unmounting filesystem. [ 388.268878][ T3876] loop5: detected capacity change from 0 to 16 [ 388.275462][ T3876] erofs: Unknown parameter '˙˙˙˙˙˙01777777777777777777777˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙01777777777777777777777184467440737095516150xffffffffffffffff˙˙˙˙' [ 388.414409][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 388.414438][ T28] audit: type=1326 audit(1750941421.765:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 389.391417][ T3883] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 390.150332][ T2896] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 390.175146][ T3882] loop6: detected capacity change from 0 to 256 [ 390.981594][ T3882] FAT-fs (loop6): Unrecognized mount option "shor†name=mixed" or missing value [ 390.993635][ T28] audit: type=1326 audit(1750941423.495:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 391.017066][ T28] audit: type=1326 audit(1750941423.495:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 391.850182][ T28] audit: type=1326 audit(1750941423.495:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 391.873707][ T28] audit: type=1326 audit(1750941423.495:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 391.911229][ T3899] loop4: detected capacity change from 0 to 128 [ 391.917545][ T28] audit: type=1326 audit(1750941423.495:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 392.023812][ T28] audit: type=1326 audit(1750941423.495:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 393.282938][ T3908] tty tty28: ldisc open failed (-12), clearing slot 27 [ 393.459172][ T28] audit: type=1326 audit(1750941423.495:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d2938e963 code=0x7ffc0000 [ 393.469635][ T3914] loop6: detected capacity change from 0 to 256 [ 393.511967][ T28] audit: type=1326 audit(1750941423.515:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d2938d3df code=0x7ffc0000 [ 393.588545][ T28] audit: type=1326 audit(1750941423.525:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d2938e9b7 code=0x7ffc0000 [ 394.732400][ T28] audit: type=1326 audit(1750941423.525:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d2938d290 code=0x7ffc0000 [ 394.853479][ T28] audit: type=1326 audit(1750941423.525:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8d2938e52b code=0x7ffc0000 [ 394.876836][ T28] audit: type=1326 audit(1750941424.335:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d2938d58a code=0x7ffc0000 [ 395.145597][ T3936] 9pnet_fd: Insufficient options for proto=fd [ 395.386536][ T28] audit: type=1326 audit(1750941424.335:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8d2938d58a code=0x7ffc0000 [ 395.437172][ T28] audit: type=1326 audit(1750941424.335:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8d2938d197 code=0x7ffc0000 [ 395.464476][ T28] audit: type=1326 audit(1750941424.335:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8d293900ca code=0x7ffc0000 [ 395.488421][ T28] audit: type=1326 audit(1750941424.345:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3879 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d2938d290 code=0x7ffc0000 [ 396.350289][ T1583] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 397.330158][ T1583] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.346806][ T1583] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 397.367980][ T1583] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 397.377093][ T1583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 397.853578][ T1583] usb 6-1: SerialNumber: syz [ 397.868101][ T3964] loop4: detected capacity change from 0 to 512 [ 398.777423][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 398.777437][ T28] audit: type=1400 audit(1750941432.125:857): avc: denied { append } for pid=3963 comm="syz.4.846" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 399.609955][ T28] audit: type=1400 audit(1750941432.945:858): avc: denied { create } for pid=3973 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 400.419490][ T310] usb 6-1: USB disconnect, device number 7 [ 400.648801][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.852'. [ 401.246873][ T3998] loop2: detected capacity change from 0 to 256 [ 401.267228][ T3998] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 401.350798][ T28] audit: type=1400 audit(1750941434.695:859): avc: denied { mounton } for pid=3995 comm="syz.2.853" path="/163/file1/file0" dev="loop2" ino=1048634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.691241][ T4001] loop5: detected capacity change from 0 to 256 [ 401.987051][ T4001] FAT-fs (loop5): Directory bread(block 64) failed [ 402.023988][ T4001] FAT-fs (loop5): Directory bread(block 65) failed [ 402.035787][ T4001] FAT-fs (loop5): Directory bread(block 66) failed [ 402.060894][ T4001] FAT-fs (loop5): Directory bread(block 67) failed [ 402.069193][ T4001] FAT-fs (loop5): Directory bread(block 68) failed [ 402.157884][ T4001] FAT-fs (loop5): Directory bread(block 69) failed [ 402.168489][ T4001] FAT-fs (loop5): Directory bread(block 70) failed [ 402.175141][ T4001] FAT-fs (loop5): Directory bread(block 71) failed [ 402.182062][ T4001] FAT-fs (loop5): Directory bread(block 72) failed [ 402.188618][ T4001] FAT-fs (loop5): Directory bread(block 73) failed [ 402.192257][ T4010] device bridge3 entered promiscuous mode [ 402.883923][ T4015] loop6: detected capacity change from 0 to 2048 [ 403.073948][ T4019] loop4: detected capacity change from 0 to 256 [ 403.100510][ T4015] EXT4-fs: Ignoring removed mblk_io_submit option [ 403.106965][ T4015] EXT4-fs: dax option not supported [ 403.120443][ T4019] exfat: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙' [ 403.330094][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 403.340502][ T467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.262528][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.859'. [ 404.568693][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 405.620669][ T310] usb 2-1: device descriptor read/all, error -71 [ 407.724067][ T4055] loop5: detected capacity change from 0 to 512 [ 408.190681][ T4055] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 408.240720][ T4055] EXT4-fs (loop5): orphan cleanup on readonly fs [ 408.247805][ T4055] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 408.257273][ T4055] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 408.266664][ T4055] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.867: Failed to acquire dquot type 1 [ 408.278864][ T4055] EXT4-fs (loop5): 1 truncate cleaned up [ 408.285570][ T4055] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 408.302862][ T28] audit: type=1400 audit(1750941441.655:860): avc: denied { lock } for pid=4047 comm="syz.5.867" path="/57/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 408.496550][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 408.652098][ T4065] loop4: detected capacity change from 0 to 256 [ 408.835733][ T4075] device bridge4 entered promiscuous mode [ 409.967381][ T28] audit: type=1326 audit(1750941443.315:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 410.017736][ T4082] loop2: detected capacity change from 0 to 256 [ 410.100858][ T4084] loop5: detected capacity change from 0 to 256 [ 410.114130][ T4084] FAT-fs (loop5): Unrecognized mount option "shor†name=mixed" or missing value [ 410.133286][ T4082] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 410.262327][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 410.382376][ T28] audit: type=1326 audit(1750941443.345:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 410.407665][ T28] audit: type=1326 audit(1750941443.355:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 410.511764][ T28] audit: type=1326 audit(1750941443.355:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 410.540417][ T28] audit: type=1326 audit(1750941443.365:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 411.256459][ T4092] Illegal XDP return value 4294967274 on prog (id 611) dev N/A, expect packet loss! [ 411.452208][ T28] audit: type=1326 audit(1750941443.375:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 411.489365][ T4098] loop2: detected capacity change from 0 to 1024 [ 411.658967][ T4097] loop4: detected capacity change from 0 to 16 [ 411.692502][ T4098] EXT4-fs: Ignoring removed i_version option [ 412.120325][ T4098] EXT4-fs: quotafile must be on filesystem root [ 412.128043][ T28] audit: type=1326 audit(1750941443.375:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.5.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 412.134383][ T4097] erofs: (device loop4): mounted with root inode @ nid 36. [ 412.211755][ T4105] loop6: detected capacity change from 0 to 256 [ 412.230581][ T2896] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 412.354609][ T4097] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 412.364193][ T4097] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 412.375105][ T4097] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 412.425336][ T4108] 9pnet_fd: Insufficient options for proto=fd [ 412.529198][ T4110] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 412.538655][ T4110] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 412.549583][ T4110] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 412.925468][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 413.864116][ T4124] loop4: detected capacity change from 0 to 256 [ 413.958194][ T4124] FAT-fs (loop4): Directory bread(block 64) failed [ 413.964846][ T4124] FAT-fs (loop4): Directory bread(block 65) failed [ 413.971591][ T4124] FAT-fs (loop4): Directory bread(block 66) failed [ 413.978216][ T4124] FAT-fs (loop4): Directory bread(block 67) failed [ 413.984942][ T4124] FAT-fs (loop4): Directory bread(block 68) failed [ 413.991566][ T4124] FAT-fs (loop4): Directory bread(block 69) failed [ 413.998225][ T4124] FAT-fs (loop4): Directory bread(block 70) failed [ 414.004779][ T4124] FAT-fs (loop4): Directory bread(block 71) failed [ 414.014179][ T4124] FAT-fs (loop4): Directory bread(block 72) failed [ 414.021556][ T4124] FAT-fs (loop4): Directory bread(block 73) failed [ 414.889180][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 414.889194][ T28] audit: type=1400 audit(1750941448.235:918): avc: denied { map } for pid=4126 comm="syz.1.885" path="socket:[28029]" dev="sockfs" ino=28029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 414.975003][ T4130] device bridge5 entered promiscuous mode [ 414.985331][ T4132] loop4: detected capacity change from 0 to 256 [ 414.996032][ T4133] loop6: detected capacity change from 0 to 512 [ 415.058009][ T4133] EXT4-fs (loop6): failed to initialize system zone (-117) [ 415.076261][ T4133] EXT4-fs (loop6): mount failed [ 415.276714][ T4138] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 415.756229][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 415.763888][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 415.774505][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.781829][ T4143] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 415.797599][ T4143] device bridge0 left promiscuous mode [ 415.803358][ T4143] device bridge1 left promiscuous mode [ 415.809038][ T4143] device bridge2 left promiscuous mode [ 415.816881][ T4146] fuse: Bad value for 'fd' [ 415.978522][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 416.041286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 416.049577][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 416.058056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 416.066435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.075277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 416.084064][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.093087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.385298][ T4154] loop2: detected capacity change from 0 to 512 [ 416.418743][ T4153] kvm: apic: phys broadcast and lowest prio [ 416.426380][ T4154] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 416.438355][ T4154] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.890: path /173/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 416.642041][ T4165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.892'. [ 416.694529][ T4165] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4165 comm=syz.5.892 [ 416.710369][ T1232] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.920933][ T286] EXT4-fs (loop2): unmounting filesystem. [ 416.970188][ T1232] usb 7-1: Using ep0 maxpacket: 32 [ 416.972557][ T4169] loop2: detected capacity change from 0 to 512 [ 416.976400][ T1232] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.993828][ T1232] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.018959][ T1232] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 417.034844][ T4169] EXT4-fs (loop2): Test dummy encryption mode enabled [ 417.047952][ T4169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 417.110387][ T1232] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 417.148843][ T1232] usb 7-1: Product: syz [ 417.166966][ T1232] usb 7-1: Manufacturer: syz [ 417.268457][ T1232] hub 7-1:4.0: USB hub found [ 417.274925][ T4169] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.894: bad orphan inode 131083 [ 417.289372][ T4169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 417.763239][ T4177] loop5: detected capacity change from 0 to 1024 [ 417.854679][ T286] EXT4-fs (loop2): unmounting filesystem. [ 417.889668][ T467] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.133400][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.140875][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 418.167203][ T4186] device veth0_vlan left promiscuous mode [ 418.173728][ T4186] device veth0_vlan entered promiscuous mode [ 418.185247][ T4186] device veth1_macvtap entered promiscuous mode [ 418.191788][ T4186] device macsec0 left promiscuous mode [ 418.201473][ T4186] device bridge2 left promiscuous mode [ 418.207494][ T4186] device vti1 left promiscuous mode [ 418.240909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 418.310340][ T1232] hub 7-1:4.0: config failed, can't read hub descriptor (err -22) [ 418.332724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 418.340836][ T4184] loop2: detected capacity change from 0 to 256 [ 418.344471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 418.355702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 418.368721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 418.377057][ T467] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.377423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 418.391178][ T1232] usb 7-1: USB disconnect, device number 3 [ 418.395360][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 418.408892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 418.418109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.444425][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.452141][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.661701][ T4191] loop4: detected capacity change from 0 to 512 [ 418.686775][ T4191] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.899: inode #1: comm syz.4.899: iget: illegal inode # [ 418.717036][ T4197] device bridge3 entered promiscuous mode [ 418.726721][ T4191] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.899: error while reading EA inode 1 err=-117 [ 418.808370][ T4191] EXT4-fs (loop4): 1 orphan inode deleted [ 418.814957][ T4191] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 419.410059][ T4201] xt_socket: unknown flags 0xc [ 421.031127][ T285] EXT4-fs (loop4): unmounting filesystem. [ 421.336565][ T4217] loop6: detected capacity change from 0 to 512 [ 422.402701][ T4217] loop6: detected capacity change from 0 to 16 [ 422.456302][ T4217] erofs: (device loop6): mounted with root inode @ nid 36. [ 423.386628][ T4226] loop6: detected capacity change from 0 to 256 [ 423.407424][ T28] audit: type=1400 audit(1750941456.755:919): avc: denied { read } for pid=4229 comm="syz.2.908" path="socket:[28753]" dev="sockfs" ino=28753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 423.440656][ T2896] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 423.676308][ T4236] syz.6.909[4236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.677468][ T4236] syz.6.909[4236] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.174824][ T4236] loop6: detected capacity change from 0 to 128 [ 425.197034][ T4236] EXT4-fs (loop6): Test dummy encryption mode enabled [ 425.234090][ T4236] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 425.242852][ T4236] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 425.488414][ T2822] EXT4-fs (loop6): unmounting filesystem. [ 425.512731][ T4234] loop2: detected capacity change from 0 to 512 [ 425.534548][ T4245] loop5: detected capacity change from 0 to 1024 [ 425.599510][ T4245] EXT4-fs: Ignoring removed orlov option [ 425.655709][ T4234] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 425.713465][ T4245] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 425.745684][ T4234] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 425.841863][ T4234] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 425.912686][ T4234] EXT4-fs (loop2): 1 truncate cleaned up [ 425.936360][ T4234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 426.353986][ T4252] device bridge3 entered promiscuous mode [ 426.420269][ T4234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 427.000888][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 427.024752][ T286] EXT4-fs (loop2): unmounting filesystem. [ 427.034168][ T28] audit: type=1400 audit(1750941460.385:920): avc: denied { map } for pid=4249 comm="syz.1.912" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 427.076159][ T4264] loop5: detected capacity change from 0 to 2048 [ 427.094594][ T28] audit: type=1400 audit(1750941460.445:921): avc: denied { append } for pid=4249 comm="syz.1.912" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 427.117878][ T4250] random: crng reseeded on system resumption [ 427.273585][ T4266] usb usb1: check_ctrlrecip: process 4266 (syz.2.916) requesting ep 01 but needs 81 [ 427.304012][ T28] audit: type=1400 audit(1750941460.465:922): avc: denied { open } for pid=4249 comm="syz.1.912" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 427.477005][ T4264] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 427.489995][ T4264] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.508349][ T28] audit: type=1400 audit(1750941461.855:923): avc: denied { read write } for pid=4284 comm="syz.4.922" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 428.587669][ T4289] loop4: detected capacity change from 0 to 128 [ 428.612140][ T28] audit: type=1400 audit(1750941461.885:924): avc: denied { open } for pid=4284 comm="syz.4.922" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 428.654447][ T4291] loop2: detected capacity change from 0 to 256 [ 428.661787][ T4291] exfat: Deprecated parameter 'utf8' [ 428.667160][ T4291] exfat: Deprecated parameter 'utf8' [ 428.667403][ T4292] syz.1.920[4292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.672507][ T4292] syz.1.920[4292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 428.704164][ T4291] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 428.763339][ T4289] FAT-fs (loop4): bogus number of FAT structure [ 428.800806][ T28] audit: type=1400 audit(1750941461.935:925): avc: denied { create } for pid=4284 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 428.931363][ T4289] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 429.044500][ T4289] FAT-fs (loop4): Can't find a valid FAT filesystem [ 429.288419][ T4299] overlayfs: failed to set xattr on upper [ 429.294641][ T4299] overlayfs: failed to resolve './file0': -2 [ 429.434938][ T28] audit: type=1400 audit(1750941462.785:926): avc: denied { create } for pid=4295 comm="syz.6.923" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 429.550229][ T28] audit: type=1400 audit(1750941462.785:927): avc: denied { link } for pid=4295 comm="syz.6.923" name="file1" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 429.669489][ T4303] loop2: detected capacity change from 0 to 512 [ 429.737797][ T4303] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 429.761817][ T4307] device bridge5 entered promiscuous mode [ 429.770761][ T4303] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.817381][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 429.859521][ T4309] device bridge4 entered promiscuous mode [ 430.589073][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.5.927'. [ 433.806810][ T28] audit: type=1400 audit(1750941467.155:928): avc: denied { getopt } for pid=4329 comm="syz.5.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 433.828399][ T286] EXT4-fs (loop2): unmounting filesystem. [ 434.041139][ T4334] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 434.382599][ T4342] netlink: 52 bytes leftover after parsing attributes in process `syz.2.932'. [ 434.459356][ T4343] netlink: 68 bytes leftover after parsing attributes in process `syz.4.930'. [ 435.243493][ T4355] loop6: detected capacity change from 0 to 256 [ 435.277705][ T4355] FAT-fs (loop6): Unrecognized mount option "nonumtaűl=0" or missing value [ 435.621013][ T28] audit: type=1326 audit(1750941468.935:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 435.671412][ T28] audit: type=1326 audit(1750941468.935:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 435.830241][ C1] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 436.292262][ T28] audit: type=1326 audit(1750941468.935:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 436.317670][ T4365] loop5: detected capacity change from 0 to 256 [ 436.407264][ T4365] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 436.489922][ T4367] 9pnet_fd: p9_fd_create_tcp (4367): problem connecting socket to 127.0.0.1 [ 436.712671][ T4369] device bridge5 entered promiscuous mode [ 436.732413][ T28] audit: type=1326 audit(1750941468.935:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 436.765455][ T4372] device bridge6 entered promiscuous mode [ 436.786036][ T28] audit: type=1326 audit(1750941468.935:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 436.809668][ T28] audit: type=1326 audit(1750941468.935:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 437.020971][ T28] audit: type=1326 audit(1750941468.935:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 437.052500][ T28] audit: type=1326 audit(1750941468.945:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 437.084791][ T28] audit: type=1326 audit(1750941468.945:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4353 comm="syz.1.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 437.968217][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 440.977486][ T4398] loop5: detected capacity change from 0 to 256 [ 441.001575][ T4398] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 442.956372][ T4413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 443.007464][ T4408] futex_wake_op: syz.2.950 tries to shift op by -1; fix this program [ 443.214339][ T4418] futex_wake_op: syz.5.951 tries to shift op by -1; fix this program [ 443.451926][ T4422] fuse: Bad value for 'fd' [ 445.196846][ T4438] device bridge6 entered promiscuous mode [ 446.550916][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 447.253671][ T4457] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 449.335587][ T4468] netlink: 76 bytes leftover after parsing attributes in process `syz.2.959'. [ 449.493040][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 449.493054][ T28] audit: type=1326 audit(1750941482.845:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x0 [ 449.881812][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 450.165916][ T4483] loop4: detected capacity change from 0 to 2048 [ 451.488545][ T1583] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 451.530190][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 451.658529][ T4483] loop4: p1 < > p3 [ 451.674498][ T4483] loop4: p3 size 134217728 extends beyond EOD, truncated [ 451.861805][ T4494] futex_wake_op: syz.5.967 tries to shift op by -1; fix this program [ 453.027384][ T4494] loop5: detected capacity change from 0 to 512 [ 454.102076][ T4494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 454.921489][ T1583] usb 3-1: device descriptor read/all, error -71 [ 454.969242][ T4494] EXT4-fs (loop5): 1 truncate cleaned up [ 454.974944][ T4494] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 455.022066][ T28] audit: type=1400 audit(1750941488.355:942): avc: denied { ioctl } for pid=4487 comm="syz.5.967" path="/78/file2/file1" dev="loop5" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 455.027712][ T103] loop4: p1 < > p3 [ 455.053381][ T103] loop4: p3 size 134217728 extends beyond EOD, truncated [ 455.680694][ T2719] EXT4-fs (loop5): unmounting filesystem. [ 455.682083][ T4510] device bridge7 entered promiscuous mode [ 455.970772][ T4521] overlayfs: failed to set xattr on upper [ 455.976812][ T4521] overlayfs: failed to resolve './file0': -2 [ 456.359906][ T4530] device veth0_vlan left promiscuous mode [ 456.366240][ T4530] device veth0_vlan entered promiscuous mode [ 456.410704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.421118][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.429885][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.929339][ T4536] loop5: detected capacity change from 0 to 16 [ 456.942737][ T4540] loop4: detected capacity change from 0 to 256 [ 456.992938][ T4536] erofs: (device loop5): mounted with root inode @ nid 36. [ 458.481734][ T4554] loop4: detected capacity change from 0 to 4096 [ 458.553489][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 458.836767][ T4568] syz.4.982[4568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 458.836917][ T4568] syz.4.982[4568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 461.464158][ T285] EXT4-fs (loop4): unmounting filesystem. [ 461.483549][ T4578] loop6: detected capacity change from 0 to 128 [ 461.580449][ T4578] EXT4-fs (loop6): Test dummy encryption mode enabled [ 461.765074][ T4578] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 461.783283][ T4578] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 461.817885][ T28] audit: type=1400 audit(1750941495.165:943): avc: denied { create } for pid=4577 comm="syz.6.997" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 461.926073][ T4587] loop4: detected capacity change from 0 to 512 [ 462.191895][ T4590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.988'. [ 462.257296][ T4590] bridge0: port 3(syz_tun) entered blocking state [ 462.263828][ T4590] bridge0: port 3(syz_tun) entered disabled state [ 462.281467][ T4590] device syz_tun entered promiscuous mode [ 462.289002][ T4590] bridge0: port 3(syz_tun) entered blocking state [ 462.295443][ T4590] bridge0: port 3(syz_tun) entered forwarding state [ 462.400716][ T4587] loop4: detected capacity change from 0 to 16 [ 462.409802][ T4587] erofs: (device loop4): mounted with root inode @ nid 36. [ 462.866312][ T4591] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 462.917468][ T4597] loop5: detected capacity change from 0 to 128 [ 462.972922][ T4597] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.071595][ T2822] EXT4-fs (loop6): unmounting filesystem. [ 463.150220][ T4595] device bridge3 entered promiscuous mode [ 465.366684][ T4628] device veth0_vlan left promiscuous mode [ 465.373144][ T4628] device veth0_vlan entered promiscuous mode [ 465.460359][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.467857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 465.539153][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 465.646830][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 465.677488][ T28] audit: type=1400 audit(1750941499.025:944): avc: denied { write } for pid=4630 comm="syz.4.996" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 465.738635][ T4632] device syzkaller0 entered promiscuous mode [ 465.789359][ T4641] hub 6-0:1.0: USB hub found [ 465.794283][ T4641] hub 6-0:1.0: 1 port detected [ 466.220163][ T1444] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 466.420251][ T1444] usb 3-1: Using ep0 maxpacket: 32 [ 466.426924][ T1444] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 466.435179][ T1444] usb 3-1: config 0 has no interface number 0 [ 466.441325][ T1444] usb 3-1: config 0 interface 132 has no altsetting 0 [ 466.449392][ T1444] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 466.458482][ T1444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.466506][ T1444] usb 3-1: Product: syz [ 466.470699][ T1444] usb 3-1: Manufacturer: syz [ 466.475302][ T1444] usb 3-1: SerialNumber: syz [ 466.480517][ T1444] usb 3-1: config 0 descriptor?? [ 466.564297][ T4650] loop4: detected capacity change from 0 to 2048 [ 466.571367][ T4650] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.577903][ T4650] EXT4-fs: dax option not supported [ 466.683809][ T467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.695868][ T1444] cdc_subset: probe of 3-1:0.132 failed with error -71 [ 466.713518][ T1444] usb 3-1: USB disconnect, device number 14 [ 467.002062][ T4658] input: syz0 as /devices/virtual/input/input9 [ 467.506364][ T4659] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1002'. [ 467.562253][ T28] audit: type=1400 audit(1750941500.865:945): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1434 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.789083][ T4663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'. [ 467.831761][ T4663] bridge0: port 1(macsec1) entered blocking state [ 467.838286][ T4663] bridge0: port 1(macsec1) entered disabled state [ 469.100165][ T28] audit: type=1400 audit(1750941500.865:946): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1434 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.172742][ T28] audit: type=1400 audit(1750941500.865:947): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1434 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 469.208748][ T4673] device bridge8 entered promiscuous mode [ 469.867602][ T4682] overlayfs: failed to set xattr on upper [ 469.873563][ T4682] overlayfs: failed to resolve './file0': -2 [ 470.643803][ T4685] loop6: detected capacity change from 0 to 128 [ 470.892770][ T4685] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 470.902355][ T4685] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.286284][ T2822] EXT4-fs (loop6): unmounting filesystem. [ 472.350174][ T3503] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 472.786852][ T4711] loop6: detected capacity change from 0 to 256 [ 472.805465][ T4711] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 472.921757][ T3503] usb 2-1: Using ep0 maxpacket: 32 [ 472.986123][ T3503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.998089][ T3503] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.013032][ T3503] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.023203][ T3503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.562446][ T3503] usb 2-1: config 0 descriptor?? [ 473.573324][ T3503] hub 2-1:0.0: USB hub found [ 473.677443][ T28] audit: type=1400 audit(1750941507.025:948): avc: denied { map } for pid=4715 comm="syz.6.1018" path="socket:[30736]" dev="sockfs" ino=30736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 473.701137][ T28] audit: type=1400 audit(1750941507.025:949): avc: denied { ioctl } for pid=4715 comm="syz.6.1018" path="socket:[30186]" dev="sockfs" ino=30186 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 473.770161][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 473.778908][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.787387][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.796277][ T28] audit: type=1400 audit(1750941507.145:950): avc: denied { create } for pid=4689 comm="syz.1.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 473.821320][ T4691] device vlan2 entered promiscuous mode [ 473.826970][ T4691] device veth0 entered promiscuous mode [ 473.870921][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.879491][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.889621][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.898162][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.907055][ T3503] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 473.916048][ T3503] usbhid 2-1:0.0: can't add hid device: -71 [ 473.922083][ T3503] usbhid: probe of 2-1:0.0 failed with error -71 [ 473.950157][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 473.956485][ T24] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 473.964717][ T24] usb 6-1: config 0 has no interface number 0 [ 473.970609][ T3503] usb 2-1: USB disconnect, device number 6 [ 473.971092][ T24] usb 6-1: config 0 interface 132 has no altsetting 0 [ 473.984720][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 473.993803][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.001824][ T24] usb 6-1: Product: syz [ 474.005979][ T24] usb 6-1: Manufacturer: syz [ 474.010584][ T24] usb 6-1: SerialNumber: syz [ 474.015674][ T24] usb 6-1: config 0 descriptor?? [ 474.223173][ T24] cdc_subset: probe of 6-1:0.132 failed with error -71 [ 474.231786][ T24] usb 6-1: USB disconnect, device number 8 [ 474.617717][ T4731] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1019'. [ 474.950161][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 475.140258][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 475.146447][ T24] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 475.154812][ T24] usb 7-1: config 0 has no interface number 0 [ 475.161107][ T24] usb 7-1: config 0 interface 132 has no altsetting 0 [ 475.170672][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 475.179796][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.210162][ T4743] device bridge4 entered promiscuous mode [ 475.218131][ T28] audit: type=1400 audit(1750941508.545:951): avc: denied { mount } for pid=4738 comm="syz.5.1034" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 475.272458][ T28] audit: type=1400 audit(1750941508.545:952): avc: denied { watch watch_reads } for pid=4738 comm="syz.5.1034" path="/89/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 475.283979][ T24] usb 7-1: Product: syz [ 475.302254][ T28] audit: type=1400 audit(1750941508.545:953): avc: denied { unmount } for pid=2719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 475.337267][ T24] usb 7-1: Manufacturer: syz [ 475.342150][ T24] usb 7-1: SerialNumber: syz [ 475.347846][ T24] usb 7-1: config 0 descriptor?? [ 476.152400][ T28] audit: type=1400 audit(1750941509.495:954): avc: denied { unmount } for pid=4732 comm="syz.6.1021" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 476.163812][ T24] cdc_subset: probe of 7-1:0.132 failed with error -71 [ 476.905524][ T4759] syz.5.1038[4759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.906690][ T4759] syz.5.1038[4759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.925611][ T4760] syz.1.1026[4760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.938086][ T4760] syz.1.1026[4760] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.354484][ T24] usb 7-1: USB disconnect, device number 4 [ 480.754943][ T4767] fuse: Bad value for 'fd' [ 484.955330][ T4802] device bridge4 entered promiscuous mode [ 484.981566][ T4803] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1036'. [ 487.130166][ T1583] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 487.330204][ T1232] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 487.337726][ T1583] usb 2-1: Using ep0 maxpacket: 16 [ 487.343815][ T1583] usb 2-1: no configurations [ 487.348425][ T1583] usb 2-1: can't read configurations, error -22 [ 487.510164][ T1583] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 487.520169][ T1232] usb 6-1: Using ep0 maxpacket: 32 [ 487.530554][ T1232] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 487.538752][ T1232] usb 6-1: config 0 has no interface number 0 [ 487.544911][ T1232] usb 6-1: config 0 interface 132 has no altsetting 0 [ 487.630315][ T1232] usb 6-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 487.639381][ T1232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.647978][ T1232] usb 6-1: Product: syz [ 487.652441][ T1232] usb 6-1: Manufacturer: syz [ 487.657035][ T1232] usb 6-1: SerialNumber: syz [ 487.662722][ T1232] usb 6-1: config 0 descriptor?? [ 488.334218][ T4846] fuse: Bad value for 'fd' [ 493.557275][ T4845] netlink: 'syz.2.1057': attribute type 13 has an invalid length. [ 493.566171][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 493.573975][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 493.584401][ T4845] gretap0: refused to change device tx_queue_len [ 493.591484][ T4845] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 493.671688][ T4853] device bridge9 entered promiscuous mode [ 493.692453][ T1583] usb 2-1: Using ep0 maxpacket: 16 [ 495.836072][ T1583] usb 2-1: device descriptor read/all, error -71 [ 495.954454][ T1232] usb 6-1: can't set config #0, error -71 [ 497.392115][ T4879] overlayfs: failed to resolve './file1': -2 [ 497.932285][ T1583] usb usb2-port1: attempt power cycle [ 497.938875][ T1232] usb 6-1: USB disconnect, device number 9 [ 498.177607][ T4886] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1059'. [ 498.189334][ T4886] IPv6: sit2: Disabled Multicast RS [ 498.317145][ T4895] syz.4.1061[4895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.317235][ T4895] syz.4.1061[4895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.897317][ T4907] block device autoloading is deprecated and will be removed. [ 500.102954][ T4910] syz.6.1062[4910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.103328][ T4910] syz.6.1062[4910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.490276][ T1232] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 502.680166][ T1232] usb 6-1: Using ep0 maxpacket: 32 [ 502.685868][ T1232] usb 6-1: device descriptor read/all, error -71 [ 503.068763][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 503.077920][ T4940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.090620][ T4940] device bridge3 left promiscuous mode [ 503.096401][ T4940] device bridge4 left promiscuous mode [ 503.397630][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 503.405304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 504.174941][ T4943] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1070'. [ 505.953002][ T28] audit: type=1400 audit(1750941539.145:955): avc: denied { name_bind } for pid=4957 comm="syz.6.1075" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 506.713815][ T4968] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 506.723408][ T4968] SELinux: failed to load policy [ 507.184745][ T28] audit: type=1400 audit(1750941540.065:956): avc: denied { load_policy } for pid=4960 comm="syz.2.1076" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 507.205144][ T28] audit: type=1400 audit(1750941540.255:957): avc: denied { nlmsg_write } for pid=4932 comm="syz.5.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 507.226532][ T28] audit: type=1400 audit(1750941540.255:958): avc: denied { nlmsg_read } for pid=4932 comm="syz.5.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 508.451293][ T4987] syz.1.1079[4987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.451459][ T4987] syz.1.1079[4987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.951747][ T5014] overlayfs: failed to clone upperpath [ 513.490149][ T3503] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 513.649850][ T28] audit: type=1326 audit(1750941546.995:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 513.710195][ T3503] usb 2-1: Using ep0 maxpacket: 32 [ 513.719776][ T3503] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 513.735496][ T28] audit: type=1326 audit(1750941546.995:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 513.751170][ T3503] usb 2-1: config 0 has no interface number 0 [ 513.760745][ T28] audit: type=1326 audit(1750941546.995:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 513.788516][ T28] audit: type=1326 audit(1750941546.995:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 513.933713][ T3503] usb 2-1: config 0 interface 132 has no altsetting 0 [ 513.939527][ T28] audit: type=1326 audit(1750941546.995:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 513.957337][ T3503] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 513.964031][ T28] audit: type=1326 audit(1750941546.995:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 514.010726][ T28] audit: type=1326 audit(1750941546.995:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8d2938e963 code=0x7ffc0000 [ 514.122291][ T3503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.135494][ T3503] usb 2-1: Product: syz [ 514.140738][ T3503] usb 2-1: Manufacturer: syz [ 514.148482][ T3503] usb 2-1: SerialNumber: syz [ 514.172058][ T28] audit: type=1326 audit(1750941546.995:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d2938d3df code=0x7ffc0000 [ 514.363890][ T28] audit: type=1326 audit(1750941546.995:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8d2938e9b7 code=0x7ffc0000 [ 514.868698][ T28] audit: type=1326 audit(1750941546.995:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.6.1091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d2938d290 code=0x7ffc0000 [ 514.954056][ T5035] netlink: 'syz.6.1093': attribute type 1 has an invalid length. [ 514.961860][ T5035] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1093'. [ 515.538672][ T3503] usb 2-1: config 0 descriptor?? [ 515.751293][ T3503] cdc_subset: probe of 2-1:0.132 failed with error -71 [ 515.830892][ T3503] usb 2-1: USB disconnect, device number 10 [ 517.468365][ T5062] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1097'. [ 517.479305][ T5065] incfs: Can't find or create .index dir in ./bus [ 517.499595][ T5065] incfs: mount failed -22 [ 517.966416][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 517.982142][ T5069] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 519.792740][ T5096] futex_wake_op: syz.2.1106 tries to shift op by -1; fix this program [ 520.796924][ T5103] device bridge7 entered promiscuous mode [ 520.840489][ T3503] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 520.945478][ T5111] fuse: Bad value for 'fd' [ 521.110162][ T330] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 521.172459][ T3503] usb 5-1: Using ep0 maxpacket: 32 [ 521.178802][ T3503] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 521.189618][ T3503] usb 5-1: config 0 has no interface number 0 [ 521.195721][ T3503] usb 5-1: config 0 interface 132 has no altsetting 0 [ 521.203970][ T3503] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 521.213062][ T3503] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.221093][ T3503] usb 5-1: Product: syz [ 521.225248][ T3503] usb 5-1: Manufacturer: syz [ 521.230280][ T3503] usb 5-1: SerialNumber: syz [ 521.295957][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 521.295980][ T28] audit: type=1326 audit(1750941554.635:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.327898][ T28] audit: type=1326 audit(1750941554.635:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.379896][ T330] usb 6-1: Using ep0 maxpacket: 32 [ 521.381101][ T3503] usb 5-1: config 0 descriptor?? [ 521.390167][ T28] audit: type=1326 audit(1750941554.645:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.401975][ T330] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 521.415436][ T28] audit: type=1326 audit(1750941554.645:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.421837][ T330] usb 6-1: config 0 has no interface number 0 [ 521.421867][ T330] usb 6-1: config 0 interface 132 has no altsetting 0 [ 521.451895][ T28] audit: type=1326 audit(1750941554.645:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.487619][ T28] audit: type=1326 audit(1750941554.645:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5113 comm="syz.1.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 521.517492][ T330] usb 6-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 521.526598][ T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.534647][ T330] usb 6-1: Product: syz [ 521.538839][ T330] usb 6-1: Manufacturer: syz [ 521.543476][ T330] usb 6-1: SerialNumber: syz [ 521.548719][ T330] usb 6-1: config 0 descriptor?? [ 521.621322][ T3503] cdc_subset: probe of 5-1:0.132 failed with error -71 [ 521.640051][ T3503] usb 5-1: USB disconnect, device number 8 [ 522.138759][ T330] cdc_subset: probe of 6-1:0.132 failed with error -71 [ 522.149495][ T330] usb 6-1: USB disconnect, device number 12 [ 522.322702][ T5133] overlayfs: failed to clone lowerpath [ 522.471747][ T5135] syz.2.1116[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.471823][ T5135] syz.2.1116[5135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.253936][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 525.006150][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 525.207286][ T5151] overlayfs: failed to clone upperpath [ 525.418492][ T5159] capability: warning: `syz.5.1123' uses deprecated v2 capabilities in a way that may be insecure [ 525.613320][ T5158] netlink: 'syz.6.1122': attribute type 13 has an invalid length. [ 525.812793][ T5158] gretap0: refused to change device tx_queue_len [ 525.820660][ T5158] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 526.526867][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'. [ 527.709058][ T5189] syz.5.1130[5189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.709131][ T5189] syz.5.1130[5189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 531.811220][ T28] audit: type=1400 audit(1750941565.165:1007): avc: denied { name_bind } for pid=5210 comm="syz.2.1137" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 531.986394][ T28] audit: type=1400 audit(1750941565.165:1008): avc: denied { setopt } for pid=5210 comm="syz.2.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.124177][ T28] audit: type=1400 audit(1750941565.915:1009): avc: denied { ioctl } for pid=5231 comm="syz.2.1142" path="socket:[31662]" dev="sockfs" ino=31662 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.166432][ T28] audit: type=1400 audit(1750941566.225:1010): avc: denied { bind } for pid=5231 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.273727][ T28] audit: type=1400 audit(1750941566.345:1011): avc: denied { setopt } for pid=5231 comm="syz.2.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 533.362835][ T5241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1140'. [ 533.438078][ T5241] device bridge0 entered promiscuous mode [ 533.450633][ T5241] bridge0: port 3(macsec1) entered blocking state [ 533.457340][ T5241] bridge0: port 3(macsec1) entered disabled state [ 533.710648][ T5241] device bridge0 left promiscuous mode [ 535.691481][ T5268] netlink: 'syz.4.1148': attribute type 27 has an invalid length. [ 535.699893][ T5268] device bridge2 left promiscuous mode [ 535.717579][ T5268] device bridge3 left promiscuous mode [ 535.729976][ T5268] device bridge4 left promiscuous mode [ 536.067401][ T5268] device bridge5 left promiscuous mode [ 536.084777][ T5268] device bridge7 left promiscuous mode [ 536.099094][ T5268] device bridge8 left promiscuous mode [ 536.113290][ T5268] device bridge9 left promiscuous mode [ 536.252708][ T5276] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1150'. [ 537.237282][ T5265] device veth0_vlan left promiscuous mode [ 537.256549][ T5265] device veth0_vlan entered promiscuous mode [ 537.267566][ T5265] device veth1_macvtap entered promiscuous mode [ 537.594644][ T5276] IPv6: sit2: Disabled Multicast RS [ 537.659330][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 537.667634][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 537.675375][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 537.683927][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 537.692505][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 537.701054][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 537.877204][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 538.162920][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 538.290542][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 538.298707][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 538.298945][ T28] audit: type=1400 audit(1750941571.645:1012): avc: denied { read } for pid=5291 comm="syz.2.1155" path="socket:[31731]" dev="sockfs" ino=31731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 538.310022][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 538.338217][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 538.348491][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 538.356735][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 538.370316][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.378712][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.387419][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.395877][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.404307][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 538.417316][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 538.425430][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 538.433464][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 538.447442][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 538.455933][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 538.476850][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 538.485161][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 538.493841][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 538.501399][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.509647][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.517882][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.525607][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 538.533839][ T4956] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 539.341725][ T5297] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 539.351079][ T5297] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 539.521969][ T5308] xt_TPROXY: Can be used only with -p tcp or -p udp [ 541.140838][ T5329] incfs: Can't find or create .incomplete dir in ./bus [ 541.147893][ T5329] incfs: mount failed -22 [ 543.286617][ T28] audit: type=1326 audit(1750941575.765:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 543.787737][ T28] audit: type=1326 audit(1750941575.765:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 543.874323][ T5350] overlayfs: failed to clone upperpath [ 544.481844][ T28] audit: type=1326 audit(1750941575.785:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 544.537453][ T28] audit: type=1326 audit(1750941575.785:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 544.581985][ T28] audit: type=1326 audit(1750941575.785:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 544.605732][ T28] audit: type=1326 audit(1750941575.815:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 544.636072][ T28] audit: type=1326 audit(1750941575.815:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 544.740985][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1172'. [ 544.756629][ T5360] overlayfs: missing 'lowerdir' [ 545.008548][ T28] audit: type=1326 audit(1750941575.815:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 545.085561][ T28] audit: type=1326 audit(1750941575.825:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 545.203748][ T28] audit: type=1326 audit(1750941575.825:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 546.415779][ T28] audit: type=1326 audit(1750941575.835:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 546.459159][ T5374] overlayfs: failed to clone upperpath [ 546.717202][ T5358] binder: 5354:5358 ioctl 4018920a 200000000280 returned -22 [ 547.223301][ T5383] IPv6: Can't replace route, no match found [ 547.318148][ T5390] overlayfs: failed to clone upperpath [ 548.436322][ T354] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 548.482239][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1183'. [ 548.552712][ T5405] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1184'. [ 548.586762][ T5405] IPv6: sit1: Disabled Multicast RS [ 548.920209][ T354] usb 3-1: Using ep0 maxpacket: 16 [ 548.934617][ T354] usb 3-1: no configurations [ 548.959591][ T354] usb 3-1: can't read configurations, error -22 [ 548.978574][ T5408] overlayfs: failed to clone upperpath [ 549.110231][ T354] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 549.358898][ T354] usb 3-1: Using ep0 maxpacket: 16 [ 550.162078][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 550.171917][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 550.307016][ T354] usb 3-1: no configurations [ 550.311875][ T354] usb 3-1: can't read configurations, error -22 [ 550.357584][ T354] usb usb3-port1: attempt power cycle [ 550.364500][ T5425] overlayfs: failed to clone upperpath [ 551.026650][ T5432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1191'. [ 551.036529][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1191'. [ 551.601482][ T5444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=5444 comm=syz.2.1195 [ 552.088704][ T5448] overlayfs: failed to clone upperpath [ 553.851107][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 553.851121][ T28] audit: type=1326 audit(1750941587.205:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 553.938769][ T28] audit: type=1326 audit(1750941587.205:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 553.962417][ T28] audit: type=1326 audit(1750941587.235:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.150920][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1204'. [ 554.161660][ T5482] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1204'. [ 554.666020][ T28] audit: type=1326 audit(1750941587.235:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.711941][ T28] audit: type=1326 audit(1750941587.235:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.741179][ T5487] overlayfs: failed to clone upperpath [ 554.748347][ T28] audit: type=1326 audit(1750941587.235:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.774938][ T28] audit: type=1326 audit(1750941587.235:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.799098][ T28] audit: type=1326 audit(1750941587.235:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.830463][ T28] audit: type=1326 audit(1750941587.235:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 554.854356][ T28] audit: type=1326 audit(1750941587.245:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5468 comm="syz.1.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 555.703101][ T5504] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1209'. [ 555.721185][ T5504] bridge0: port 1(syz_tun) entered blocking state [ 555.727675][ T5504] bridge0: port 1(syz_tun) entered disabled state [ 555.741821][ T5504] device syz_tun entered promiscuous mode [ 555.751144][ T5504] bridge0: port 1(syz_tun) entered blocking state [ 555.757578][ T5504] bridge0: port 1(syz_tun) entered forwarding state [ 557.251744][ T5524] syz.5.1213[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.252248][ T5524] syz.5.1213[5524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.190190][ T1444] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 558.923937][ T5538] syz.6.1219[5538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.924221][ T5538] syz.6.1219[5538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.972657][ T1444] usb 3-1: Using ep0 maxpacket: 32 [ 559.704890][ T5541] overlayfs: failed to clone upperpath [ 559.935454][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1220'. [ 559.955479][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1220'. [ 560.567520][ T1444] usb 3-1: device descriptor read/all, error -71 [ 560.948649][ T5557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1223'. [ 561.071934][ T5559] syz.6.1222[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.072318][ T5559] syz.6.1222[5559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.343814][ T5570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 563.723259][ T5572] overlayfs: failed to clone upperpath [ 564.126401][ T5576] device bridge6 entered promiscuous mode [ 566.060973][ T5587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1230'. [ 566.071768][ T5587] bridge0: port 3(macsec1) entered blocking state [ 566.078189][ T5587] bridge0: port 3(macsec1) entered disabled state [ 566.195350][ T5597] futex_wake_op: syz.5.1232 tries to shift op by -1; fix this program [ 567.091276][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 567.124596][ T28] audit: type=1400 audit(1750941599.705:1056): avc: denied { mount } for pid=5589 comm="syz.4.1235" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 567.625630][ T5604] syz.1.1233[5604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.626726][ T5604] syz.1.1233[5604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.945917][ T5608] overlayfs: failed to clone upperpath [ 568.999627][ T5610] overlayfs: failed to clone upperpath [ 569.330155][ T3503] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 569.510149][ T3503] usb 3-1: Using ep0 maxpacket: 32 [ 569.516520][ T3503] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 569.524745][ T3503] usb 3-1: config 0 has no interface number 0 [ 569.530869][ T3503] usb 3-1: config 0 interface 132 has no altsetting 0 [ 569.539017][ T3503] usb 3-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 569.548095][ T3503] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.556132][ T3503] usb 3-1: Product: syz [ 569.560307][ T3503] usb 3-1: Manufacturer: syz [ 569.564909][ T3503] usb 3-1: SerialNumber: syz [ 569.570799][ T3503] usb 3-1: config 0 descriptor?? [ 569.717681][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 570.117270][ T3503] cdc_subset: probe of 3-1:0.132 failed with error -71 [ 570.125721][ T3503] usb 3-1: USB disconnect, device number 20 [ 570.484339][ T5638] netlink: 'syz.1.1243': attribute type 13 has an invalid length. [ 570.540094][ T5638] gretap0: refused to change device tx_queue_len [ 570.566740][ T5638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 571.198297][ T5643] overlayfs: failed to clone upperpath [ 572.668471][ T5646] device bridge8 entered promiscuous mode [ 573.758717][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1248'. [ 573.769496][ T5661] device bridge0 entered promiscuous mode [ 573.775469][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 573.782966][ T5661] bridge0: port 2(macsec1) entered blocking state [ 573.789400][ T5661] bridge0: port 2(macsec1) entered disabled state [ 573.845586][ T5661] device bridge0 left promiscuous mode [ 574.030030][ T5667] overlayfs: failed to clone upperpath [ 574.113108][ T5672] overlayfs: failed to clone upperpath [ 576.530993][ T5698] overlayfs: failed to clone upperpath [ 576.550833][ T5697] overlayfs: failed to clone upperpath [ 578.676332][ T5712] overlayfs: failed to clone upperpath [ 578.686878][ T5709] device bridge11 entered promiscuous mode [ 578.780749][ T5716] overlayfs: failed to clone upperpath [ 579.002521][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1262'. [ 579.045459][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1262'. [ 579.571838][ T5725] device bridge9 entered promiscuous mode [ 580.745833][ T28] audit: type=1400 audit(1750941613.565:1057): avc: denied { name_bind } for pid=5722 comm="syz.4.1266" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 581.615810][ T5738] overlayfs: failed to clone upperpath [ 581.643088][ T5740] overlayfs: failed to clone upperpath [ 582.520326][ T5747] overlayfs: failed to clone lowerpath [ 583.594935][ T5752] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1269'. [ 584.238980][ T5752] overlayfs: missing 'lowerdir' [ 585.684868][ T5759] overlayfs: failed to clone upperpath [ 585.797407][ T28] audit: type=1326 audit(1750941619.145:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 585.820961][ T28] audit: type=1326 audit(1750941619.145:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.247734][ T28] audit: type=1326 audit(1750941619.145:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.527102][ T5775] overlayfs: failed to clone upperpath [ 590.549342][ T28] audit: type=1326 audit(1750941619.145:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.574225][ T28] audit: type=1326 audit(1750941619.145:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.597832][ T28] audit: type=1326 audit(1750941619.145:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.599241][ T5780] device bridge12 entered promiscuous mode [ 590.628261][ T28] audit: type=1326 audit(1750941619.145:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.663519][ T28] audit: type=1326 audit(1750941619.145:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.687369][ T28] audit: type=1326 audit(1750941619.145:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 590.765798][ T28] audit: type=1326 audit(1750941619.145:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5766 comm="syz.6.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d2938e929 code=0x7ffc0000 [ 592.210666][ T5791] overlayfs: failed to clone lowerpath [ 592.263479][ T5787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=5787 comm=syz.1.1282 [ 592.442912][ T5797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 594.093503][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 594.113616][ T5805] overlayfs: missing 'lowerdir' [ 595.985867][ T5809] overlayfs: failed to clone upperpath [ 596.086918][ T5814] overlayfs: failed to clone upperpath [ 597.425332][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1300'. [ 597.434628][ T5834] overlayfs: failed to clone upperpath [ 597.442673][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'. [ 597.451856][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1300'. [ 598.288875][ T5860] overlayfs: failed to clone upperpath [ 598.363967][ T5862] overlayfs: failed to clone upperpath [ 598.811230][ T5873] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1315'. [ 598.846813][ T5877] overlayfs: missing 'lowerdir' [ 598.876158][ T5887] overlayfs: failed to clone upperpath [ 598.900903][ T5893] overlayfs: failed to clone upperpath [ 599.187234][ T5914] overlayfs: failed to clone upperpath [ 599.539520][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 599.539533][ T28] audit: type=1400 audit(1750941632.885:1086): avc: denied { read } for pid=5919 comm="syz.2.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 599.820710][ T28] audit: type=1326 audit(1750941633.175:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 599.910737][ T28] audit: type=1326 audit(1750941633.245:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 599.938946][ T28] audit: type=1326 audit(1750941633.265:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.4.1348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a1278e929 code=0x7ffc0000 [ 599.966726][ T5942] overlayfs: failed to clone upperpath [ 600.320734][ T5946] overlayfs: failed to clone upperpath [ 600.581733][ T5962] 9pnet_fd: Insufficient options for proto=fd [ 601.656370][ T5980] overlayfs: failed to clone upperpath [ 601.664171][ T5982] overlayfs: failed to clone upperpath [ 601.738788][ T28] audit: type=1400 audit(1750941635.085:1090): avc: denied { shutdown } for pid=5978 comm="syz.4.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 601.764830][ T6002] overlayfs: failed to clone upperpath [ 602.429327][ T6033] overlayfs: failed to clone upperpath [ 602.448069][ T6035] overlayfs: failed to clone upperpath [ 603.373668][ T6063] device bridge13 entered promiscuous mode [ 603.388469][ T6060] overlayfs: failed to clone upperpath [ 603.397922][ T6066] overlayfs: failed to clone upperpath [ 604.557573][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1405'. [ 604.568514][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1405'. [ 607.222893][ T6117] device bridge10 entered promiscuous mode [ 608.054756][ T6126] netlink: 'syz.4.1417': attribute type 4 has an invalid length. [ 608.816834][ T6138] overlayfs: failed to clone upperpath [ 608.945423][ T6140] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 608.960372][ T28] audit: type=1400 audit(1750941642.305:1091): avc: denied { relabelto } for pid=6139 comm="syz.1.1430" name="282" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 614.693813][ T28] audit: type=1400 audit(1750941642.305:1092): avc: denied { associate } for pid=6139 comm="syz.1.1430" name="282" dev="tmpfs" ino=1603 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 614.738841][ T28] audit: type=1400 audit(1750941648.045:1093): avc: denied { write } for pid=284 comm="syz-executor" name="282" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 614.854487][ T28] audit: type=1400 audit(1750941648.045:1094): avc: denied { remove_name } for pid=284 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 615.040557][ T28] audit: type=1400 audit(1750941648.045:1095): avc: denied { rmdir } for pid=284 comm="syz-executor" name="282" dev="tmpfs" ino=1603 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 616.856500][ T6187] device bridge14 entered promiscuous mode [ 617.746807][ T6198] futex_wake_op: syz.2.1451 tries to shift op by -1; fix this program [ 617.890467][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 617.971467][ T6215] overlayfs: failed to clone upperpath [ 618.084900][ T6224] device bridge15 entered promiscuous mode [ 618.677513][ T28] audit: type=1400 audit(1750941652.025:1096): avc: denied { bind } for pid=6249 comm="syz.6.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 618.861160][ T6260] overlayfs: failed to clone upperpath [ 619.058378][ T6272] overlayfs: failed to clone upperpath [ 619.243132][ T28] audit: type=1400 audit(1750941652.595:1097): avc: denied { create } for pid=6319 comm="syz.2.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 619.274817][ T6326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.387204][ T28] audit: type=1326 audit(1750941652.735:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 619.419191][ T28] audit: type=1326 audit(1750941652.735:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 619.443990][ T28] audit: type=1326 audit(1750941652.765:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 619.469641][ T28] audit: type=1326 audit(1750941652.765:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6359 comm="syz.2.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1b8e929 code=0x7ffc0000 [ 620.576354][ T6395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1547'. [ 620.637999][ T6404] overlayfs: failed to clone upperpath [ 620.703320][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 620.703333][ T28] audit: type=1400 audit(1750941654.055:1125): avc: denied { getattr } for pid=6411 comm="syz.1.1554" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 620.759991][ T6420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 620.769710][ T6420] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 620.792864][ T28] audit: type=1326 audit(1750941654.145:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.816666][ T28] audit: type=1326 audit(1750941654.145:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.840364][ T28] audit: type=1326 audit(1750941654.145:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.865128][ T28] audit: type=1326 audit(1750941654.145:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.889460][ T28] audit: type=1326 audit(1750941654.145:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.914026][ T28] audit: type=1326 audit(1750941654.145:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.937772][ T28] audit: type=1326 audit(1750941654.145:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.961360][ T28] audit: type=1326 audit(1750941654.145:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 620.985368][ T28] audit: type=1326 audit(1750941654.145:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6425 comm="syz.1.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb158e929 code=0x7ffc0000 [ 622.094825][ T6464] netlink: 'syz.5.1578': attribute type 1 has an invalid length. [ 622.467710][ T6490] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1571'. [ 624.019153][ T6508] device bridge16 entered promiscuous mode [ 624.490672][ T6546] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1614'. [ 625.019483][ T6591] device bridge7 entered promiscuous mode [ 625.130361][ T6610] overlayfs: failed to clone upperpath [ 625.555564][ T6634] overlayfs: failed to clone upperpath [ 626.073386][ T6671] overlayfs: failed to clone upperpath [ 626.479218][ T6690] overlayfs: failed to clone upperpath [ 626.747356][ T6702] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 626.762948][ T6703] overlayfs: failed to clone upperpath [ 626.830771][ T6717] overlayfs: failed to clone upperpath [ 626.847562][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1693'. [ 627.350080][ T6757] sock: sock_set_timeout: `syz.5.1708' (pid 6757) tries to set negative timeout [ 627.780941][ T6776] overlayfs: failed to clone upperpath [ 628.228097][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 628.228112][ T28] audit: type=1400 audit(1750941661.575:1197): avc: denied { read } for pid=6803 comm="syz.6.1729" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 629.278329][ T6842] fuse: Bad value for 'fd' [ 629.401576][ T6853] overlayfs: failed to clone upperpath [ 630.476403][ T6915] overlayfs: failed to clone upperpath [ 630.737208][ T6932] overlayfs: failed to clone upperpath [ 632.710512][ T7059] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1838'. [ 632.821661][ T7078] overlayfs: failed to clone upperpath [ 633.013890][ T7104] netlink: 'syz.4.1861': attribute type 1 has an invalid length. [ 633.061369][ T28] audit: type=1400 audit(1750941666.415:1198): avc: denied { rename } for pid=7112 comm="syz.4.1865" name="file0" dev="tmpfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 633.070339][ T7111] overlayfs: failed to clone upperpath [ 633.103703][ T7117] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S˙˙ion: 1ŕ [ 633.117844][ T28] audit: type=1400 audit(1750941666.445:1199): avc: denied { read write execute } for pid=7112 comm="syz.4.1865" name="file7" dev="tmpfs" ino=2112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 633.514087][ T7137] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 635.334264][ T7202] overlayfs: failed to clone upperpath [ 636.050669][ T7228] overlayfs: failed to clone upperpath [ 636.098864][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 636.107824][ T7232] device syz_tun left promiscuous mode [ 636.113472][ T7232] bridge0: port 1(syz_tun) entered disabled state [ 636.330822][ T7257] overlayfs: failed to clone upperpath [ 636.775115][ T7267] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1919'. [ 638.124058][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 638.237538][ T7320] overlayfs: failed to clone upperpath [ 639.260935][ T7355] device veth1_macvtap left promiscuous mode [ 639.266963][ T7355] device macsec0 entered promiscuous mode [ 639.305667][ T7355] device veth1_macvtap entered promiscuous mode [ 639.312264][ T7355] device macsec0 left promiscuous mode [ 639.318061][ T1898] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.643232][ T7411] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1969'. [ 641.268107][ T7424] device bridge_slave_1 left promiscuous mode [ 641.274691][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.282261][ T7424] device bridge_slave_0 left promiscuous mode [ 641.288497][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.084157][ T7461] overlayfs: failed to clone upperpath [ 642.151532][ T7465] netlink: 'syz.4.2003': attribute type 7 has an invalid length. [ 642.159359][ T7465] netlink: 'syz.4.2003': attribute type 8 has an invalid length. [ 643.619053][ T7491] bridge: RTM_NEWNEIGH with invalid ether address [ 644.461574][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2016'. [ 645.884057][ T7551] futex_wake_op: syz.2.2034 tries to shift op by -1; fix this program [ 648.337352][ T7570] overlayfs: failed to clone upperpath [ 648.378217][ T7574] overlayfs: failed to clone upperpath [ 649.119998][ T7598] syz.2.2050[7598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 649.120449][ T7598] syz.2.2050[7598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.267562][ T7630] overlayfs: failed to clone upperpath [ 650.352001][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 650.718490][ T7635] overlayfs: failed to clone upperpath [ 651.370854][ T7651] overlayfs: failed to resolve './file2': -2 [ 652.355470][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 652.376374][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 652.398803][ T7665] device bridge11 left promiscuous mode [ 652.404797][ T7665] device bridge12 left promiscuous mode [ 652.411054][ T7665] device bridge13 left promiscuous mode [ 652.416754][ T7665] device bridge14 left promiscuous mode [ 652.422611][ T7665] device bridge15 left promiscuous mode [ 652.428327][ T7665] device bridge16 left promiscuous mode [ 653.115252][ T7677] overlayfs: failed to clone upperpath [ 656.036895][ T7714] overlayfs: missing 'lowerdir' [ 658.263934][ T7741] overlayfs: failed to clone upperpath [ 658.320833][ T7746] netlink: 632 bytes leftover after parsing attributes in process `syz.1.2095'. [ 659.531386][ T7766] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2094'. [ 659.771383][ T7775] xt_hashlimit: size too large, truncated to 1048576 [ 661.451572][ T7784] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2103'. [ 661.510950][ T7784] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2103'. [ 663.400190][ T7823] device veth1_macvtap left promiscuous mode [ 663.406209][ T7823] device macsec0 entered promiscuous mode [ 664.034207][ T7839] device bridge0 entered promiscuous mode [ 664.080865][ T7844] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2124'. [ 664.111004][ T7844] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2124'. [ 664.122867][ T7848] overlayfs: failed to clone upperpath [ 664.333947][ T7851] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 665.287043][ T7870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 666.258440][ T7883] overlayfs: failed to clone upperpath [ 667.688016][ T7914] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2142'. [ 667.717845][ T7914] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2142'. [ 668.098221][ T7923] overlayfs: failed to clone upperpath [ 670.087339][ T7950] overlayfs: failed to resolve './file2': -2 [ 670.882231][ T7962] overlayfs: failed to clone upperpath [ 670.984984][ T7967] overlayfs: failed to resolve './file2': -2 [ 673.426365][ T8001] overlayfs: failed to clone upperpath [ 674.135249][ T8016] overlayfs: failed to clone upperpath [ 674.140486][ T8018] overlayfs: failed to clone upperpath [ 674.736010][ T8034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 675.020681][ T8055] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2186'. [ 675.799360][ T8070] overlayfs: failed to clone upperpath [ 677.716655][ T8094] overlayfs: failed to clone upperpath [ 678.242374][ T8101] overlayfs: failed to clone upperpath [ 678.685408][ T8116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2203'. [ 679.405900][ T8122] overlayfs: failed to clone upperpath [ 679.418946][ T8124] device bridge17 entered promiscuous mode [ 682.348184][ T8163] overlayfs: failed to clone upperpath [ 683.243015][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2219'. [ 685.342878][ T8178] device bridge9 entered promiscuous mode [ 687.343142][ T8200] overlayfs: failed to clone upperpath [ 687.596302][ T8208] overlayfs: failed to clone upperpath [ 688.275884][ T8222] overlayfs: failed to clone upperpath [ 689.740034][ T8249] overlayfs: failed to clone upperpath [ 690.653628][ T8257] device bridge18 entered promiscuous mode [ 691.018886][ T8268] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2246'. [ 691.679004][ T8278] overlayfs: failed to clone upperpath [ 693.474203][ T8296] overlayfs: failed to clone upperpath [ 693.491218][ T8295] overlayfs: failed to clone upperpath [ 697.148633][ T8334] syz.1.2266[8334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.148693][ T8334] syz.1.2266[8334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.161666][ T8334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2266'. [ 702.860545][ T8384] device gretap0 entered promiscuous mode [ 702.866451][ T8384] device macsec2 entered promiscuous mode [ 702.935388][ T8384] device gretap0 left promiscuous mode [ 703.588946][ T8402] overlayfs: failed to clone upperpath [ 705.837689][ T8441] overlayfs: failed to clone upperpath [ 710.937975][ T8523] overlayfs: failed to clone upperpath [ 712.803414][ T8555] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 712.812203][ T8555] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 713.662997][ T8565] overlayfs: failed to clone upperpath [ 714.239354][ T8580] overlayfs: failed to clone upperpath [ 714.610433][ T8587] overlayfs: failed to clone upperpath [ 718.678550][ T8615] netlink: 'syz.1.2345': attribute type 3 has an invalid length. [ 718.749878][ T8613] overlayfs: failed to resolve './file2': -2 [ 723.599381][ T8654] xt_CT: No such helper "pptp" [ 723.607981][ T28] audit: type=1326 audit(1750941756.955:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8621 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x7fc00000 [ 723.929930][ T8659] overlayfs: failed to clone upperpath [ 725.978131][ T8682] overlayfs: failed to clone upperpath [ 726.090160][ T28] audit: type=1326 audit(1750941759.435:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.281223][ T28] audit: type=1326 audit(1750941759.435:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.309865][ T28] audit: type=1326 audit(1750941759.435:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.339507][ T28] audit: type=1326 audit(1750941759.435:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.363154][ T28] audit: type=1326 audit(1750941759.435:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.386694][ T28] audit: type=1326 audit(1750941759.435:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.410314][ T28] audit: type=1326 audit(1750941759.435:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.433824][ T28] audit: type=1326 audit(1750941759.435:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 726.457288][ T28] audit: type=1326 audit(1750941759.435:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8674 comm="syz.5.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7fc00000 [ 727.359070][ T8715] overlayfs: failed to clone upperpath [ 728.603635][ T8732] netlink: 'syz.6.2377': attribute type 4 has an invalid length. [ 728.642683][ T8732] netlink: 'syz.6.2377': attribute type 4 has an invalid length. [ 728.948099][ T8735] overlayfs: failed to clone upperpath [ 729.902541][ T8747] device bridge0 entered promiscuous mode [ 731.885153][ T8760] device veth5 entered promiscuous mode [ 735.198841][ T8793] device gretap0 entered promiscuous mode [ 735.204757][ T8793] device macsec1 entered promiscuous mode [ 735.214033][ T8793] device gretap0 left promiscuous mode [ 735.464276][ T8797] device bridge19 entered promiscuous mode [ 736.024100][ T8807] overlayfs: failed to clone upperpath [ 736.162894][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2396'. [ 736.632220][ T8814] futex_wake_op: syz.4.2400 tries to shift op by -1; fix this program [ 737.323811][ T8825] bridge0: port 3(syz_tun) entered blocking state [ 737.330311][ T8825] bridge0: port 3(syz_tun) entered disabled state [ 737.337810][ T8825] device syz_tun entered promiscuous mode [ 737.343852][ T8825] bridge0: port 3(syz_tun) entered blocking state [ 737.350331][ T8825] bridge0: port 3(syz_tun) entered forwarding state [ 737.626298][ T8831] overlayfs: failed to clone upperpath [ 737.650258][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 737.650273][ T28] audit: type=1326 audit(1750941770.995:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 737.685319][ T28] audit: type=1326 audit(1750941771.005:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.5.2403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f938078e929 code=0x7ffc0000 [ 738.417015][ T8845] overlayfs: failed to clone upperpath [ 738.427181][ T8843] device bridge8 entered promiscuous mode [ 739.624195][ T8861] bridge0: port 4(vlan2) entered blocking state [ 739.630558][ T8861] bridge0: port 4(vlan2) entered disabled state [ 739.637866][ T8861] device vlan2 entered promiscuous mode [ 739.643777][ T8861] bridge0: port 4(vlan2) entered blocking state [ 739.650045][ T8861] bridge0: port 4(vlan2) entered forwarding state [ 740.794127][ T8866] overlayfs: failed to clone upperpath [ 745.571459][ T8886] overlayfs: failed to clone upperpath [ 745.623409][ T28] audit: type=1400 audit(1750941778.975:1270): avc: denied { create } for pid=8894 comm="syz.5.2423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 751.788834][ T28] audit: type=1326 audit(1750941785.135:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8930 comm="syz.1.2432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febb158e929 code=0x0 [ 752.633615][ T8939] netlink: 280 bytes leftover after parsing attributes in process `syz.5.2433'. [ 754.758442][ T8963] overlayfs: failed to clone upperpath [ 755.553345][ T8968] netlink: 'syz.5.2446': attribute type 3 has an invalid length. [ 755.561212][ T8968] netlink: 'syz.5.2446': attribute type 3 has an invalid length. [ 758.042788][ T8994] device veth3 entered promiscuous mode [ 758.527094][ T9001] syz.2.2450[9001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 758.527205][ T9001] syz.2.2450[9001] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 758.898826][ T9008] netlink: 'syz.4.2451': attribute type 4 has an invalid length. [ 759.483642][ T9009] netlink: 'syz.4.2451': attribute type 4 has an invalid length. [ 762.717683][ T9054] device bridge10 entered promiscuous mode [ 764.874595][ T9075] device vti0 entered promiscuous mode [ 764.927313][ T9072] netlink: 'syz.5.2466': attribute type 4 has an invalid length. [ 764.941389][ T9072] netlink: 'syz.5.2466': attribute type 4 has an invalid length. [ 765.293732][ T9084] overlayfs: failed to clone upperpath [ 767.162723][ T9097] netlink: 'syz.6.2469': attribute type 1 has an invalid length. [ 767.555275][ T9110] device bridge8 entered promiscuous mode [ 773.875579][ T9158] overlayfs: failed to clone upperpath [ 774.678210][ T9176] device bridge0 entered promiscuous mode [ 776.363449][ T9193] overlayfs: failed to clone upperpath [ 777.677053][ T9211] overlayfs: failed to resolve './file1': -2 [ 779.111404][ T9231] syz.4.2508[9231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.111786][ T9231] syz.4.2508[9231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.388337][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2506'. [ 781.093217][ T9248] overlayfs: failed to clone upperpath [ 783.000025][ T9257] overlayfs: failed to clone upperpath [ 785.322943][ T9284] device bridge20 entered promiscuous mode [ 789.804564][ T9313] overlayfs: failed to clone upperpath [ 896.010099][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 896.017088][ C0] (detected by 0, t=10002 jiffies, g=42297, q=236 ncpus=2) [ 896.024365][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4295026820-4295016817), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 896.037721][ C0] rcu: rcu_preempt kthread starved for 10004 jiffies! g42297 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 896.048920][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 896.058922][ C0] rcu: RCU grace-period kthread stack dump: [ 896.064830][ C0] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 896.075620][ C0] Call Trace: [ 896.078896][ C0] [ 896.081823][ C0] __schedule+0xb87/0x14e0 [ 896.086337][ C0] ? release_firmware_map_entry+0x194/0x194 [ 896.092234][ C0] ? __mod_timer+0x7ae/0xb30 [ 896.096823][ C0] schedule+0xbd/0x170 [ 896.100894][ C0] schedule_timeout+0x12c/0x2e0 [ 896.105739][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 896.111111][ C0] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 896.116569][ C0] ? __cfi_process_timeout+0x10/0x10 [ 896.121849][ C0] ? prepare_to_swait_event+0x308/0x320 [ 896.127395][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 896.132258][ C0] ? rcu_gp_init+0xf10/0xf10 [ 896.136856][ C0] rcu_gp_kthread+0x95/0x370 [ 896.141447][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 896.146647][ C0] ? __kasan_check_read+0x11/0x20 [ 896.151677][ C0] ? __kthread_parkme+0x142/0x180 [ 896.156694][ C0] kthread+0x281/0x320 [ 896.160758][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 896.165956][ C0] ? __cfi_kthread+0x10/0x10 [ 896.170536][ C0] ret_from_fork+0x1f/0x30 [ 896.174955][ C0] [ 896.177961][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 896.184283][ C0] CPU: 0 PID: 9334 Comm: syz.5.2532 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 896.194077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 896.204127][ C0] RIP: 0010:x2apic_send_IPI_self+0x70/0x80 [ 896.209955][ C0] Code: 80 3c 38 00 74 08 4c 89 f7 e8 1c 37 80 00 bf f0 03 00 00 89 de 4d 8b 1e 41 ba 83 b8 d0 98 45 03 53 fc 74 02 0f 0b 41 ff d3 5b <41> 5e 41 5f 5d c3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 896.230596][ C0] RSP: 0018:ffffc9000345fc38 EFLAGS: 00000246 [ 896.236661][ C0] RAX: 00000000000000f6 RBX: ffffffff8648ab98 RCX: 000000000000083f [ 896.244638][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 896.252608][ C0] RBP: ffffc9000345fc48 R08: dffffc0000000000 R09: fffff5200068bf81 [ 896.260578][ C0] R10: 0000000000000000 R11: ffffffff81341a40 R12: 0000000000000000 [ 896.268549][ C0] R13: dffffc0000000001 R14: ffffffff8648ab50 R15: dffffc0000000000 [ 896.276521][ C0] FS: 00007f93816266c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 896.285460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 896.292036][ C0] CR2: 00007f9381625f40 CR3: 000000012eb15000 CR4: 00000000003506b0 [ 896.300001][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 896.307966][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 896.315927][ C0] Call Trace: [ 896.319198][ C0] [ 896.322120][ C0] arch_irq_work_raise+0x98/0xf0 [ 896.327062][ C0] __irq_work_queue_local+0x115/0x190 [ 896.332429][ C0] irq_work_queue+0x9e/0x150 [ 896.337012][ C0] bpf_send_signal_common+0x2b2/0x420 [ 896.342386][ C0] ? __set_printk_clr_event+0x80/0x80 [ 896.347760][ C0] ? __cfi_do_futex+0x10/0x10 [ 896.352443][ C0] bpf_send_signal+0x19/0x20 [ 896.357030][ C0] bpf_prog_7ba5217f62dcd359+0x38/0x3c [ 896.362518][ C0] bpf_trace_run2+0xff/0x250 [ 896.367104][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 896.372310][ C0] __bpf_trace_sys_enter+0x62/0x70 [ 896.377412][ C0] trace_sys_enter+0x3d/0x50 [ 896.381999][ C0] syscall_trace_enter+0xf3/0x150 [ 896.387013][ C0] syscall_enter_from_user_mode+0x1f/0x30 [ 896.392728][ C0] do_syscall_64+0x24/0xa0 [ 896.397135][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.401809][ C0] ? clear_bhb_loop+0x30/0x80 [ 896.406483][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 896.412371][ C0] RIP: 0033:0x7f938078e929 [ 896.416776][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 896.436375][ C0] RSP: 002b:00007f93816260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 896.444788][ C0] RAX: ffffffffffffffda RBX: 00007f93809b6168 RCX: 00007f938078e929 [ 896.452753][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93809b6168 [ 896.460716][ C0] RBP: 00007f93809b6160 R08: 0000000000000000 R09: 0000000000000000 [ 896.468690][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f93809b616c [ 896.476681][ C0] R13: 0000000000000000 R14: 00007ffeec8a2a90 R15: 00007ffeec8a2b78 [ 896.484675][ C0] [ 1002.220515][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 199s! [ 1002.229461][ C0] Showing busy workqueues and worker pools: [ 1002.235365][ C0] workqueue events: flags=0x0 [ 1002.240036][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=14/256 refcnt=15 [ 1002.240078][ C0] pending: free_work, psi_avgs_work, bpf_prog_free_deferred, bpf_prog_free_deferred, update_stats_workfn, bpf_prog_free_deferred, kfree_rcu_monitor, xfrm_state_gc_task, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1002.276030][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=20/256 refcnt=21 [ 1002.276076][ C0] pending: vmstat_shepherd, kfree_rcu_monitor, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker, rht_deferred_worker [ 1002.276331][ C0] workqueue events_long: flags=0x0 [ 1002.328461][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=19/256 refcnt=20 [ 1002.328510][ C0] pending: br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work [ 1002.328794][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=56/256 refcnt=57 [ 1002.328832][ C0] pending: br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup, br_fdb_cleanup, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_multicast_gc_work, br_fdb_cleanup [ 1002.329458][ C0] , br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup, br_fdb_cleanup [ 1002.329540][ C0] workqueue events_unbound: flags=0x2 [ 1002.480747][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/512 refcnt=6 [ 1002.480795][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork, bpf_map_free_deferred, bpf_map_free_deferred [ 1002.480884][ C0] workqueue events_power_efficient: flags=0x80 [ 1002.505759][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 1002.505802][ C0] pending: neigh_periodic_work, neigh_periodic_work, neigh_managed_work, neigh_managed_work, gc_worker [ 1002.505899][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 1002.505934][ C0] pending: wg_ratelimiter_gc_entries, reg_check_chans_work, check_lifetime [ 1002.506005][ C0] workqueue events_freezable_power_: flags=0x84 [ 1002.548354][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.548402][ C0] pending: sync_hw_clock [ 1002.548434][ C0] workqueue netns: flags=0xe000a [ 1002.565732][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=3 [ 1002.565773][ C0] in-flight: 6379:cleanup_net [ 1002.565810][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1002.583025][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.583073][ C0] pending: vmstat_update [ 1002.583108][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.583143][ C0] pending: vmstat_update [ 1002.583185][ C0] workqueue writeback: flags=0x4a [ 1002.612600][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.612639][ C0] pending: wb_workfn [ 1002.612680][ C0] workqueue dm_bufio_cache: flags=0x8 [ 1002.629449][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.629491][ C0] pending: work_fn [ 1002.629536][ C0] workqueue mld: flags=0x40008 [ 1002.645983][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=6 [ 1002.646024][ C0] pending: mld_mca_work [ 1002.646065][ C0] inactive: mld_mca_work, mld_query_work, mld_query_work, mld_query_work [ 1002.646148][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 1002.672450][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 1002.672496][ C0] pending: addrconf_verify_work [ 1002.672531][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 1002.672579][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 1002.672620][ C0] pending: addrconf_verify_work [ 1002.672654][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 1002.672708][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1002.717600][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.717644][ C0] pending: wg_packet_encrypt_worker [ 1002.717683][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1002.735857][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.735898][ C0] pending: wg_packet_handshake_send_worker [ 1002.735934][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1002.754521][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.754562][ C0] pending: wg_packet_encrypt_worker [ 1002.754593][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.754629][ C0] pending: wg_packet_encrypt_worker [ 1002.754663][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1002.785974][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.786017][ C0] pending: wg_packet_handshake_send_worker [ 1002.786055][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1002.804658][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.804704][ C0] pending: wg_packet_encrypt_worker [ 1002.804745][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.804781][ C0] pending: wg_packet_encrypt_worker [ 1002.804817][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1002.836121][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.836162][ C0] pending: wg_packet_handshake_send_worker [ 1002.836200][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1002.854821][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.854877][ C0] pending: wg_packet_encrypt_worker [ 1002.854909][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.854945][ C0] pending: wg_packet_encrypt_worker [ 1002.854979][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1002.886303][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.886345][ C0] pending: wg_packet_handshake_send_worker [ 1002.886384][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1002.904986][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.905030][ C0] pending: wg_packet_encrypt_worker [ 1002.905068][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1002.923272][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1002.923337][ C0] pending: wg_packet_handshake_send_worker [ 1002.923378][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1002.941989][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1002.942035][ C0] pending: wg_packet_encrypt_worker [ 1002.942068][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1002.960233][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1002.960270][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 1002.960377][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1002.988003][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1002.988044][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 1002.988149][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.015799][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/256 refcnt=6 [ 1003.015837][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material, wg_queued_expired_zero_key_material [ 1003.015948][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 1003.043857][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.043901][ C0] pending: wg_packet_encrypt_worker [ 1003.043935][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.043971][ C0] pending: wg_packet_encrypt_worker [ 1003.044007][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1003.075586][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.075631][ C0] pending: wg_packet_encrypt_worker [ 1003.075662][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.075697][ C0] pending: wg_packet_encrypt_worker [ 1003.075730][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.107077][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1003.107118][ C0] pending: wg_packet_handshake_send_worker [ 1003.107156][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1003.125919][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.125971][ C0] pending: wg_packet_encrypt_worker [ 1003.126005][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.126042][ C0] pending: wg_packet_encrypt_worker [ 1003.126079][ C0] workqueue wg-kex-wg1: flags=0x24 [ 1003.157559][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.157601][ C0] pending: wg_packet_handshake_receive_worker [ 1003.157636][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.176667][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 1003.176703][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 1003.176763][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 1003.198224][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.198270][ C0] pending: wg_packet_encrypt_worker [ 1003.198299][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.198336][ C0] pending: wg_packet_encrypt_worker [ 1003.198370][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.229756][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 1003.229794][ C0] pending: wg_packet_handshake_send_worker [ 1003.229833][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 1003.248436][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.248481][ C0] in-flight: 1583:wg_packet_decrypt_worker [ 1003.248520][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 1003.248557][ C0] pending: wg_packet_encrypt_worker [ 1003.248593][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=200s workers=6 idle: 373 1232 330 354 24 [ 1003.248657][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=211s workers=12 idle: 4956 1171 43 355 1898 8 568 3041 483 2948 308