last executing test programs: 21m43.123507324s ago: executing program 32 (id=410): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r3, 0x400, 0x0) 21m28.145859884s ago: executing program 1 (id=526): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2400, 0x0, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x4, 0x8, 0x10, 0x20}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 21m27.278237898s ago: executing program 33 (id=527): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0xef) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x32c4c60, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sched_setattr(r1, &(0x7f00000000c0)={0x38, 0x0, 0x14, 0x6, 0x41a, 0x8, 0x4, 0xf83b, 0x9, 0xe}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) fsopen(&(0x7f0000000880)='configfs\x00', 0x1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50) accept(r0, 0x0, 0x0) 21m27.275619038s ago: executing program 1 (id=529): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21m27.013499153s ago: executing program 4 (id=532): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000500)={0x0, 0x1, 0x1, [0x9, 0x557, 0x1c000, 0x5, 0x200], [0x95cd, 0x6, 0x3, 0x40, 0x4, 0xdf7b, 0xa89, 0x8001, 0x2, 0xffffffff, 0x3ff, 0x80000000, 0x0, 0x20c5, 0x100000001, 0x3, 0x10001, 0x9, 0x0, 0x401, 0xe, 0x1000, 0x8, 0xfff, 0xc7, 0xa, 0x8, 0xffffffffffffffff, 0x7, 0xa, 0x8, 0x3, 0x4be, 0x62d2, 0x4, 0x2, 0x3, 0x1, 0x40, 0x3, 0xe16e, 0xefb, 0x100, 0xfffffffffffffff9, 0x0, 0x7, 0x1, 0x635, 0x6, 0x5, 0x3, 0x5de04c2a, 0x6, 0x9, 0x800, 0x97d0, 0x2, 0x73, 0xfffffffffffffe00, 0x9, 0x8, 0x6, 0x8001, 0xffff, 0x6, 0x43, 0x5, 0x3, 0x7, 0x68, 0xc86, 0x2, 0xfffffffffffff0cf, 0x1, 0x38, 0x3, 0xffffffffffffff75, 0x9f9, 0x10, 0x0, 0xaa8, 0x9, 0x9, 0x10, 0x200, 0x6, 0x9, 0x88, 0xfffffffffffffbff, 0x10001, 0xffffffff, 0xaf5, 0x8, 0x1, 0x1, 0x5, 0x5, 0x0, 0x0, 0x3ff, 0x8000000000000001, 0x4, 0x4, 0x950, 0x3, 0x9, 0x5, 0xbdfc, 0x7fffffffffffffff, 0x4, 0x5, 0x555e263b, 0x0, 0x8, 0xffffffffffffff3c, 0xcb6, 0x8, 0xffffffffffffffff, 0xffff, 0xfffffffeffffffff, 0x8]}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0xffff, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000d40)={0x0, 0x2, {0x39, @usage=0x4, r4, 0x8, 0xfffffffffffffff9, 0xfee9, 0x9, 0x8000000000000001, 0x20, @usage=0x6, 0x2, 0x0, [0x0, 0x5, 0x4, 0x80, 0x90, 0x5]}, {0x400, @struct={0x3, 0x9df1}, 0x0, 0x800, 0x1, 0x2, 0x6, 0xa0, 0x40d, @struct={0x3f8, 0x4}, 0x1, 0x6, [0x7, 0x2, 0x9, 0x3, 0xc07c, 0x7]}, {0x0, @usage=0x17, 0x0, 0x7fff, 0x7, 0x100000001, 0x8, 0x5, 0x0, @struct={0x1, 0x2a}, 0x2, 0x9, [0x6, 0x1, 0x9, 0x9, 0x0, 0x6]}, {0x5, 0x1, 0x7fff}}) 21m26.951866504s ago: executing program 1 (id=534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) close_range(r2, 0xffffffffffffffff, 0x0) 21m26.910409114s ago: executing program 1 (id=535): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 21m26.344793593s ago: executing program 1 (id=536): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0xffffffff, 0x72, &(0x7f0000000300)=""/114, 0x40f00, 0x59, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xe, 0x5008, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r3, r3, r5, 0xffffffffffffffff, r5], &(0x7f0000000600)=[{0x0, 0x5, 0x6, 0xb}, {0x2, 0x2, 0x2, 0x6}, {0x5, 0x4, 0xe}, {0x5, 0x1, 0x7, 0xa}, {0x3, 0x3, 0x2, 0x6}, {0x0, 0x1, 0x2}], 0x10, 0x18000000}, 0x94) syz_pidfd_open(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r7, &(0x7f0000000b00)={0x2020}, 0x2020) 21m26.195469076s ago: executing program 1 (id=539): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2400, 0x0, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x4, 0x8, 0x10, 0x20}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 21m26.064626088s ago: executing program 34 (id=539): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2400, 0x0, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x21, 0x4, 0x8, 0x10, 0x20}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 21m26.062426328s ago: executing program 4 (id=543): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 21m25.583398106s ago: executing program 4 (id=545): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "c64bdc4be3765f0223bf"}, 0x15) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x8009) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380)=0x38, 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x18, 0x0, 0x0, 0xffffffffffff8001}) 21m25.349417819s ago: executing program 4 (id=546): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 21m24.72187571s ago: executing program 4 (id=548): mkdir(&(0x7f0000000300)='./bus\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 21m24.371362225s ago: executing program 4 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}, @TCA_RATE={0x6, 0x5, {0x20, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 21m24.213539888s ago: executing program 35 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xa}, @TCA_RATE={0x6, 0x5, {0x20, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 20m36.970643246s ago: executing program 5 (id=829): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) 20m35.788210095s ago: executing program 5 (id=835): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x630, &(0x7f0000000000)="$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") r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x18) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20m34.814020491s ago: executing program 5 (id=840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0x2001, 0x0) 20m31.438065915s ago: executing program 5 (id=852): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 20m31.372095816s ago: executing program 6 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) 20m30.616519918s ago: executing program 5 (id=857): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x3]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 20m30.184080915s ago: executing program 6 (id=859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0xffffffffffffffff, 0x0, 0xa00369a4}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x11}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b00000c0007"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 20m29.995820808s ago: executing program 6 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x80, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) 20m29.995393898s ago: executing program 5 (id=861): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) 20m29.84769315s ago: executing program 36 (id=861): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000000000", @ANYRES32=0x0, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) 20m29.120982432s ago: executing program 6 (id=867): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) 20m27.691777605s ago: executing program 6 (id=868): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x80, 0x1c, {0x1, 0x5, 0x1004, 0xd, 0x4, 0x0, 0x8a83, 0x5, 0x33, 0x1ff, 0x0, 0xffff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000c00)={0x14, 0x0, &(0x7f0000000bc0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20m27.350626381s ago: executing program 6 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 20m27.286276152s ago: executing program 37 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 20m26.860785419s ago: executing program 9 (id=870): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) syz_fuse_handle_req(r0, &(0x7f0000008380)="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", 0x2000, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002440)={0x78, 0x0, 0x7, {0x2, 0x0, 0x0, {0xfffffffffffffffd, 0x47, 0x3, 0x16, 0xfffffffffffffffe, 0x20000000000000, 0x800, 0x4000000, 0x0, 0xc000, 0xbca4, r2, 0x0, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m26.800686449s ago: executing program 9 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x22, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 20m26.559210133s ago: executing program 9 (id=877): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)}, {&(0x7f0000000480)="3b98c053d6287182fb77fa2573c0175eac0342191cae67c6aab799113bf6df72d6bae38ad4d70cf4923614c77b93f41a8de623711dbfe9124532ef0a290a9801ffac63d114b63603306210bd0ee6922a71edb08dc4d93aab9c40b4839e5cbaf0c4d28a016f64b1f07bdfba8f695191bd5d838b4395e9bbc0cab1184676af212a79208290e0a4e5de06f7ae089f225831", 0x90}], 0x2}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0xdfa, 0x5f) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba78", 0xf, 0x11, 0x0, 0x0) 20m26.524025374s ago: executing program 9 (id=878): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', 0x0) 20m26.285847158s ago: executing program 9 (id=879): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 20m25.999461132s ago: executing program 9 (id=883): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 20m25.832408705s ago: executing program 38 (id=883): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8006}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 16.427353705s ago: executing program 0 (id=5986): r0 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r1 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000cfb30000000000000001000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006167800008000000bf91000000000000b7020000020000008500000085000000b7000000008a2b3a4cda0db7b1ead0fe"], &(0x7f0000000000)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000840)=""/4096, 0x41100, 0xa, '\x00', 0x0, @fallback=0x17, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf, 0x10000, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000005c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1, r1, r1], &(0x7f0000000600)=[{0x3, 0x2, 0x1}, {0x5, 0x4, 0xc, 0x15}, {0x4, 0x5, 0xc, 0x3}, {0x0, 0x2, 0xf}], 0x10, 0xe32}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf96b2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x803, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r9, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x86c2, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 13.56455255s ago: executing program 0 (id=5992): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x8000) 13.009638088s ago: executing program 0 (id=5997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r7, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998247856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f0b00f694c5bef739aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c669485a2e714ec9bb31ae0f201ca2e5b9ece2b035fbe2ee8d90aa87a986a307fe4fe90b7b2a48217f79001e60692c", @ANYRESDEC], 0x2, 0x5567, &(0x7f0000006f40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2}}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) 12.492749086s ago: executing program 3 (id=6001): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd61}, [@printk={@li}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.338598539s ago: executing program 3 (id=6002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='sessionid\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000040)=0xe, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1004408, &(0x7f0000000240), 0x1, 0x782, &(0x7f0000000b00)="$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") write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 10.682835015s ago: executing program 3 (id=6005): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0xa1) 10.653532285s ago: executing program 3 (id=6006): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f00000004c0)=""/107) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 10.34252514s ago: executing program 2 (id=6008): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 10.34215068s ago: executing program 2 (id=6009): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYBLOB="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"], 0x1, 0x5541, &(0x7f0000010140)="$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") open(0x0, 0x4008040, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) creat(&(0x7f00000007c0)='./file0\x00', 0x11c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x50000, 0x0, 0x0) 9.225100997s ago: executing program 0 (id=6011): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0xf0, 0x100, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x8, 0xc, 0x70c363f7}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 9.052997119s ago: executing program 8 (id=6012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000001c0)={0x2, 0x100, 0xf7}) 8.659029906s ago: executing program 2 (id=6013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3, 0x0, 0x101}]}]}, 0xfc}}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sync_file_range(0xffffffffffffffff, 0x4, 0x401, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000540)={0x2, {0x2, 0x2301, 0x14ec, 0x2}}) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x4, 0x2}}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010003c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) syz_emit_ethernet(0x2c, &(0x7f0000000000)={@multicast, @multicast, @void, {@arp={0x806, @generic={0x104, 0x1e3, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, "1b05b297940de2e2ea4e", @broadcast}}}}, &(0x7f0000000040)={0x1, 0x1, [0x115, 0x4c5, 0x3a9, 0x7f2]}) 8.497944829s ago: executing program 8 (id=6015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000a40)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x989680}, 0x0) 8.38865116s ago: executing program 8 (id=6016): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000340)="cb56", 0x2) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) write$hidraw(r3, &(0x7f0000000bc0), 0xffffffae) ioctl$HIDIOCGRDESC(r3, 0x401c5820, &(0x7f00000005c0)) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000740)="1000") 8.38551376s ago: executing program 0 (id=6017): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 8.102670084s ago: executing program 7 (id=6019): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='block_bio_remap\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 8.077634705s ago: executing program 7 (id=6020): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.891273818s ago: executing program 7 (id=6021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 7.787546209s ago: executing program 2 (id=6022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={0x0}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.042522207s ago: executing program 7 (id=6023): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8992, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x2) mmap(&(0x7f0000419000/0x4000)=nil, 0x4000, 0x800001, 0x11, r5, 0x43200000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r7 = syz_open_pts(r6, 0x101) dup3(r7, r6, 0x0) 6.041702296s ago: executing program 3 (id=6024): ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000180)="b52be39296") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/exec\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000010000", @ANYRES32, @ANYBLOB="00000000001000000000000000", @ANYRES32, @ANYBLOB='\x00'/27], 0x50) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, 0x0, &(0x7f0000001400)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x53, 0x0, 0x0) r4 = getpid() r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000476000/0x1000)=nil) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 5.957741597s ago: executing program 0 (id=6025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r2, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 5.947206158s ago: executing program 8 (id=6026): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8992, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x2) mmap(&(0x7f0000419000/0x4000)=nil, 0x4000, 0x800001, 0x11, r5, 0x43200000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r7 = syz_open_pts(r6, 0x101) dup3(r7, r6, 0x0) 5.062874182s ago: executing program 2 (id=6027): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x8992, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x2) mmap(&(0x7f0000419000/0x4000)=nil, 0x4000, 0x800001, 0x11, r5, 0x43200000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa80, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r7 = syz_open_pts(r6, 0x101) dup3(r7, r6, 0x0) 4.032444028s ago: executing program 7 (id=6028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.640404064s ago: executing program 8 (id=6029): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.643740144s ago: executing program 2 (id=6030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.641993284s ago: executing program 8 (id=6031): ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b52, &(0x7f0000000180)="b52be39296") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/exec\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000010000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, 0x0, &(0x7f0000001400)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_emit_ethernet(0x53, 0x0, 0x0) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@abs, 0x6e) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000476000/0x1000)=nil) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 1.634325735s ago: executing program 3 (id=6032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@iter={&(0x7f0000000280)=@cgroup={0x2, r3, 0xe}, 0x10}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=6033): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeff", 0xf) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4dfd, @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x183442, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=@newae={0x40, 0x1e, 0x705, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6=@empty}}, 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@usrjquota}, {}, {@sysvgroups}, {@discard}, {@noblock_validity}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800003, 0x11, r5, 0xa928e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) kernel console output (not intermixed with test programs): 00:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 892.465727][T14558] fido_id[14558]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 892.848973][T13705] EXT4-fs (loop8): unmounting filesystem. [ 892.878538][T14569] loop7: detected capacity change from 0 to 2048 [ 892.950708][ T307] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 892.965913][T14569] 9pnet_fd: Insufficient options for proto=fd [ 893.496524][T14585] loop7: detected capacity change from 0 to 256 [ 893.503605][T14585] exfat: Deprecated parameter 'utf8' [ 893.509093][T14585] exfat: Deprecated parameter 'namecase' [ 893.514958][T14585] exfat: Deprecated parameter 'utf8' [ 893.520568][T14585] exfat: Bad value for 'gid' [ 894.424262][T14593] loop0: detected capacity change from 0 to 512 [ 894.576170][T14593] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 894.585621][T14593] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 895.280488][T14491] EXT4-fs (loop0): unmounting filesystem. [ 895.421619][T11823] EXT4-fs (loop3): unmounting filesystem. [ 895.462862][T14604] loop3: detected capacity change from 0 to 512 [ 895.500067][T14604] EXT4-fs: Ignoring removed bh option [ 895.558000][T14604] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 895.577157][T14604] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 895.834106][T14610] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #12: comm syz.3.3809: Directory hole found for htree leaf block 0 [ 895.849888][T14610] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 895.859916][T14610] overlayfs: conflicting lowerdir path [ 896.530140][T11823] EXT4-fs (loop3): unmounting filesystem. [ 896.617232][T14618] loop0: detected capacity change from 0 to 256 [ 896.641206][T14618] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 896.671642][T14618] exFAT-fs (loop0): hint_cluster is invalid (17) [ 897.032151][T14632] incfs: Can't find or create .index dir in ./file0 [ 897.039659][T14632] incfs: mount failed -14 [ 897.057477][ T28] audit: type=1400 audit(1751888099.304:1744): avc: denied { mounton } for pid=14631 comm="syz.2.3816" path="/560/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 897.390113][T14636] xt_l2tp: v2 sid > 0xffff: 117440512 [ 898.352659][T14644] loop2: detected capacity change from 0 to 512 [ 898.420824][T14646] loop7: detected capacity change from 0 to 512 [ 898.444279][T14644] EXT4-fs: Ignoring removed bh option [ 898.655083][T14646] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 898.665013][T14646] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 898.850470][T14644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 898.983205][T14644] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 899.617816][T14658] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.3822: Directory hole found for htree leaf block 0 [ 899.631374][T14658] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 899.641232][T14658] overlayfs: conflicting lowerdir path [ 899.644774][T14660] loop8: detected capacity change from 0 to 256 [ 899.655552][T13482] EXT4-fs (loop7): unmounting filesystem. [ 899.711195][ T3400] EXT4-fs (loop2): unmounting filesystem. [ 899.715826][T14660] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 899.788969][T14660] exFAT-fs (loop8): hint_cluster is invalid (17) [ 901.212989][T14683] incfs: Backing dir is not set, filesystem can't be mounted. [ 901.286636][ T28] audit: type=1400 audit(1751888103.484:1745): avc: denied { watch } for pid=14682 comm="syz.2.3831" path="/565/file0/file0" dev="tmpfs" ino=3130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 901.297192][T14683] incfs: mount failed -2 [ 901.614761][T14696] xt_l2tp: v2 sid > 0xffff: 117440512 [ 903.009805][T14700] loop7: detected capacity change from 0 to 512 [ 903.016491][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 907.455190][T14700] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 907.470150][T14700] EXT4-fs: failed to create workqueue [ 907.475684][T14700] EXT4-fs (loop7): mount failed [ 908.712312][T14714] serio: Serial port ptm0 [ 909.245354][T14727] loop8: detected capacity change from 0 to 40427 [ 909.280807][T14727] F2FS-fs (loop8): Found nat_bits in checkpoint [ 909.376261][T13995] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 909.820901][T13995] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 910.559437][T14744] loop0: detected capacity change from 0 to 256 [ 910.567859][T14744] exfat: Deprecated parameter 'utf8' [ 910.573367][T14744] exfat: Deprecated parameter 'namecase' [ 910.579180][T14744] exfat: Deprecated parameter 'utf8' [ 910.584711][T14744] exfat: Bad value for 'gid' [ 910.629904][T14721] loop7: detected capacity change from 0 to 40427 [ 910.643065][T14727] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 911.109461][ T307] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 911.131392][T14721] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 911.145849][T14748] fido_id[14748]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 911.805420][T14755] loop3: detected capacity change from 0 to 128 [ 911.812436][T14755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 911.819211][T14755] EXT4-fs: Ignoring removed nomblk_io_submit option [ 912.641066][T14721] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 912.660977][T14755] EXT4-fs (loop3): Test dummy encryption mode enabled [ 912.990332][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'. [ 915.897739][T14761] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 916.250461][T14755] EXT4-fs: failed to create workqueue [ 916.256151][T14755] EXT4-fs (loop3): mount failed [ 916.308348][T14721] F2FS-fs (loop7): invalid crc value [ 916.360312][T14721] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-4) [ 916.509288][T13705] syz-executor: attempt to access beyond end of device [ 916.509288][T13705] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 916.754509][T14768] loop7: detected capacity change from 0 to 256 [ 916.915641][T14768] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 917.672146][T14785] loop7: detected capacity change from 0 to 512 [ 917.679805][T14785] EXT4-fs: Ignoring removed mblk_io_submit option [ 918.789206][T14785] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 918.954865][T14775] serio: Serial port ptm0 [ 918.979818][T14785] EXT4-fs (loop7): 1 truncate cleaned up [ 918.985957][T14785] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 919.601576][T14795] loop8: detected capacity change from 0 to 512 [ 919.608653][T14795] EXT4-fs: Ignoring removed mblk_io_submit option [ 919.616676][T14795] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 919.653405][T13482] EXT4-fs (loop7): unmounting filesystem. [ 919.712958][T14795] EXT4-fs (loop8): 1 truncate cleaned up [ 919.719125][T14795] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 920.551195][T14808] loop7: detected capacity change from 0 to 256 [ 920.558250][T14808] exfat: Deprecated parameter 'utf8' [ 920.563826][T14808] exfat: Deprecated parameter 'namecase' [ 920.571655][T14808] exfat: Deprecated parameter 'utf8' [ 920.577743][T14808] exfat: Bad value for 'gid' [ 920.594589][T13705] EXT4-fs (loop8): unmounting filesystem. [ 920.677647][ T307] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 921.261771][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3865'. [ 921.270915][T14814] device bridge_slave_1 left promiscuous mode [ 921.278080][T14814] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.286731][T14814] device bridge_slave_0 left promiscuous mode [ 921.293513][T14814] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.563262][T14810] loop2: detected capacity change from 0 to 40427 [ 921.607544][T14810] F2FS-fs (loop2): Found nat_bits in checkpoint [ 922.037618][T14810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 922.501282][ T3400] syz-executor: attempt to access beyond end of device [ 922.501282][ T3400] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 922.550904][T14823] loop3: detected capacity change from 0 to 40427 [ 922.618726][T14823] F2FS-fs (loop3): Found nat_bits in checkpoint [ 922.699857][T14823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 923.235064][T14847] loop2: detected capacity change from 0 to 512 [ 923.444173][T14847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 923.454429][T14847] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 924.084120][T14846] syz.3.3869: attempt to access beyond end of device [ 924.084120][T14846] loop3: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 924.184015][T14846] syz.3.3869: attempt to access beyond end of device [ 924.184015][T14846] loop3: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 924.255832][ T3400] EXT4-fs (loop2): unmounting filesystem. [ 924.369585][T14858] usb usb1: usbfs: process 14858 (syz.0.3874) did not claim interface 0 before use [ 924.713725][T14852] serio: Serial port ptm0 [ 924.834780][T14846] syz.3.3869: attempt to access beyond end of device [ 924.834780][T14846] loop3: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 925.117226][T14846] syz.3.3869: attempt to access beyond end of device [ 925.117226][T14846] loop3: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 925.165947][T14846] syz.3.3869: attempt to access beyond end of device [ 925.165947][T14846] loop3: rw=2049, sector=57344, nr_sectors = 48 limit=40427 [ 925.338019][T11823] syz-executor: attempt to access beyond end of device [ 925.338019][T11823] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 925.822318][T14871] xt_l2tp: v2 sid > 0xffff: 117440512 [ 925.853132][ T6140] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 928.168239][T14876] loop8: detected capacity change from 0 to 4096 [ 928.175178][T14876] EXT4-fs: Ignoring removed mblk_io_submit option [ 928.357231][T14876] EXT4-fs (loop8): Test dummy encryption mode enabled [ 928.560121][T14876] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 929.138604][T13705] EXT4-fs (loop8): unmounting filesystem. [ 930.631343][T14882] loop7: detected capacity change from 0 to 40427 [ 930.685688][T14882] F2FS-fs (loop7): Found nat_bits in checkpoint [ 930.770200][T14903] serio: Serial port ptm0 [ 930.797318][T14882] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 931.537494][T14920] usb usb1: usbfs: process 14920 (syz.0.3890) did not claim interface 0 before use [ 931.685161][T14918] serio: Serial port ptm0 [ 931.691348][T13482] syz-executor: attempt to access beyond end of device [ 931.691348][T13482] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 932.257322][T14937] fuse: Bad value for 'fd' [ 932.587322][ T5879] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 932.797323][ T5879] usb 8-1: Using ep0 maxpacket: 16 [ 932.803945][ T5879] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.873257][ T5879] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.883404][ T5879] usb 8-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 932.896612][ T5879] usb 8-1: config 0 interface 0 has no altsetting 0 [ 932.903901][ T5879] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 932.913523][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.927523][ T5879] usb 8-1: config 0 descriptor?? [ 932.950773][T14952] incfs: Can't find or create .index dir in ./file0 [ 932.968888][T14952] incfs: mount failed -14 [ 933.201878][T14950] serio: Serial port ptm0 [ 933.520527][ T5879] hid (null): global environment stack underflow [ 933.526943][ T5879] hid (null): unknown global tag 0xe [ 933.718940][ T24] usb 8-1: USB disconnect, device number 16 [ 933.730827][T14963] loop2: detected capacity change from 0 to 40427 [ 933.784842][T14963] F2FS-fs (loop2): Found nat_bits in checkpoint [ 933.811183][T14965] loop0: detected capacity change from 0 to 40427 [ 933.857121][T14963] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 933.898745][T14965] F2FS-fs (loop0): invalid crc value [ 933.913029][T14974] loop8: detected capacity change from 0 to 512 [ 933.927192][T14965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 933.948199][T14974] EXT4-fs: Ignoring removed bh option [ 934.002954][T14965] F2FS-fs (loop0): Start checkpoint disabled! [ 934.020477][T14974] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 934.030423][T14965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 934.038373][T14974] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 934.781632][T14984] fuse: Bad value for 'fd' [ 934.835155][T14965] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 934.882979][ T3400] syz-executor: attempt to access beyond end of device [ 934.882979][ T3400] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 935.407793][T14985] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #12: comm syz.8.3906: Directory hole found for htree leaf block 0 [ 935.424115][T14985] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 935.436615][T14985] overlayfs: conflicting lowerdir path [ 935.451731][ T2153] kworker/u4:51: attempt to access beyond end of device [ 935.451731][ T2153] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 935.532082][ T28] audit: type=1400 audit(1751888137.804:1746): avc: denied { unmount } for pid=14992 comm="syz.3.3911" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 935.602549][T13705] EXT4-fs (loop8): unmounting filesystem. [ 935.724520][T15002] loop8: detected capacity change from 0 to 2048 [ 935.767576][T15002] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 937.108550][T15004] serio: Serial port ptm0 [ 937.128637][T13705] EXT4-fs (loop8): unmounting filesystem. [ 938.371924][T15019] loop2: detected capacity change from 0 to 40427 [ 938.518343][T15019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 938.917338][ T6140] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 938.929858][T15019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 940.111229][ T6140] usb 1-1: Using ep0 maxpacket: 16 [ 940.304571][ T6140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.316422][ T3400] syz-executor: attempt to access beyond end of device [ 940.316422][ T3400] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 940.347323][ T6140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.397347][ T6140] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.450508][ T6140] usb 1-1: config 0 interface 0 has no altsetting 0 [ 940.469792][ T6140] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 940.507316][ T6140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.558623][ T6140] usb 1-1: config 0 descriptor?? [ 940.583537][ T6140] usb 1-1: can't set config #0, error -71 [ 940.606357][ T6140] usb 1-1: USB disconnect, device number 18 [ 940.613223][T15053] loop0: detected capacity change from 0 to 2048 [ 940.649276][T15053] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 941.240023][T15070] loop2: detected capacity change from 0 to 512 [ 941.248032][T15070] EXT4-fs: Ignoring removed bh option [ 941.288512][T15070] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 941.303886][T15070] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 941.458415][T14491] EXT4-fs (loop0): unmounting filesystem. [ 941.533344][T15077] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.3926: Directory hole found for htree leaf block 0 [ 941.550821][T15077] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 941.561390][T15077] overlayfs: conflicting lowerdir path [ 942.264301][ T3400] EXT4-fs (loop2): unmounting filesystem. [ 942.840721][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3941'. [ 943.087312][ T6140] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 943.287936][T15112] loop8: detected capacity change from 0 to 512 [ 943.295292][T15112] EXT4-fs: Ignoring removed bh option [ 943.309109][T15112] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 943.319095][T15112] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 944.152775][ T6140] usb 3-1: Using ep0 maxpacket: 16 [ 944.190139][ T6140] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.257354][ T6140] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.277784][ T6140] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 945.369390][ T6140] usb 3-1: config 0 interface 0 has no altsetting 0 [ 945.382823][ T6140] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 945.393615][ T6140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.412685][T15130] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #12: comm syz.8.3947: Directory hole found for htree leaf block 0 [ 945.732343][T15130] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 945.742116][T15130] overlayfs: conflicting lowerdir path [ 945.832324][T13705] EXT4-fs (loop8): unmounting filesystem. [ 945.854256][ T6140] usb 3-1: config 0 descriptor?? [ 945.950783][ T6140] usb 3-1: can't set config #0, error -71 [ 945.970186][ T6140] usb 3-1: USB disconnect, device number 22 [ 946.443621][T15147] loop8: detected capacity change from 0 to 256 [ 946.477364][ T301] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 946.690573][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.709681][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.875169][ T301] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 946.884925][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.893912][ T301] usb 1-1: config 0 descriptor?? [ 949.892583][ T301] usbhid 1-1:0.0: can't add hid device: -71 [ 949.902694][ T301] usbhid: probe of 1-1:0.0 failed with error -71 [ 950.336597][ T301] usb 1-1: USB disconnect, device number 19 [ 951.012704][T15187] loop8: detected capacity change from 0 to 512 [ 951.023788][T15187] EXT4-fs: Ignoring removed mblk_io_submit option [ 951.108154][T15187] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 951.214498][T15187] EXT4-fs (loop8): 1 truncate cleaned up [ 951.220490][T15187] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 952.223382][T13705] EXT4-fs (loop8): unmounting filesystem. [ 952.379501][T15198] loop2: detected capacity change from 0 to 40427 [ 952.388751][T15198] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 952.399715][T15198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 952.419276][T15198] F2FS-fs (loop2): invalid crc value [ 952.438271][T15198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 952.469902][T15199] loop0: detected capacity change from 0 to 40427 [ 952.492947][T15199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 952.497692][T15198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 952.507768][T15198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 952.550668][T15199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 953.230284][T14491] syz-executor: attempt to access beyond end of device [ 953.230284][T14491] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 953.917007][T15233] usb usb1: usbfs: process 15233 (syz.8.3978) did not claim interface 0 before use [ 955.963687][T15251] loop8: detected capacity change from 0 to 256 [ 955.970568][T15251] exfat: Deprecated parameter 'utf8' [ 955.975920][T15251] exfat: Deprecated parameter 'namecase' [ 955.981760][T15251] exfat: Deprecated parameter 'utf8' [ 955.987298][T15251] exfat: Bad value for 'gid' [ 956.621938][T15257] loop2: detected capacity change from 0 to 512 [ 956.683938][T15257] EXT4-fs: Ignoring removed bh option [ 956.821482][T15257] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 956.841187][T15257] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 957.749986][T15273] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.3984: Directory hole found for htree leaf block 0 [ 957.901354][T15273] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 957.912085][T15273] overlayfs: conflicting lowerdir path [ 957.961084][ T3400] EXT4-fs (loop2): unmounting filesystem. [ 958.040556][T15269] loop8: detected capacity change from 0 to 40427 [ 958.102225][T15269] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 958.121542][T15269] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 958.140143][T15269] F2FS-fs (loop8): invalid crc value [ 958.171611][T15269] F2FS-fs (loop8): Found nat_bits in checkpoint [ 958.251528][T15269] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 958.259770][T15269] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 961.758318][ T7452] tipc: Left network mode [ 962.067082][T15312] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.078753][T15312] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.092246][T15312] device bridge_slave_0 entered promiscuous mode [ 962.101669][T15312] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.109540][T15312] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.138639][T15312] device bridge_slave_1 entered promiscuous mode [ 963.505872][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 963.513859][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 963.530520][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 963.539489][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 963.549664][ T2237] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.557857][ T2237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.568829][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 963.579286][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 963.589046][ T2237] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.596416][ T2237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.619991][ T28] audit: type=1400 audit(1751888165.884:1747): avc: denied { create } for pid=15352 comm="syz.3.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 963.655797][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 963.696109][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 963.709244][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 963.732791][ T7452] device veth1_macvtap left promiscuous mode [ 963.740375][ T7452] device veth0_vlan left promiscuous mode [ 964.092304][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 964.130666][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.159166][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.169538][ T2237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.188823][T15312] device veth0_vlan entered promiscuous mode [ 964.239788][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 964.260223][T15312] device veth1_macvtap entered promiscuous mode [ 964.302621][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 964.314166][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 964.427317][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 964.446409][ T2133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 965.983035][T15372] serio: Serial port ptm0 [ 967.578012][T15394] loop8: detected capacity change from 0 to 40427 [ 967.586165][T15394] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 967.594508][T15394] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 967.604021][T15394] F2FS-fs (loop8): invalid crc value [ 967.641448][T15394] F2FS-fs (loop8): Found nat_bits in checkpoint [ 967.729075][T15394] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 967.740344][T15394] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 970.378427][T15431] loop2: detected capacity change from 0 to 4096 [ 970.385916][T15431] EXT4-fs: Ignoring removed mblk_io_submit option [ 970.395119][T15431] EXT4-fs (loop2): Test dummy encryption mode enabled [ 970.504006][T15431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 972.512074][T15312] EXT4-fs (loop2): unmounting filesystem. [ 972.555411][ T28] audit: type=1400 audit(1751888174.824:1748): avc: denied { bind } for pid=15453 comm="syz.3.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 973.529995][T15454] tipc: Failed to remove unknown binding: 66,1,1/0:4097600520/4097600522 [ 973.724600][T15454] device vti0 entered promiscuous mode [ 976.057368][T13995] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 976.287335][T13995] usb 1-1: Using ep0 maxpacket: 16 [ 976.318825][T13995] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.354418][T15476] loop2: detected capacity change from 0 to 40427 [ 976.424992][T13995] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.465806][T15476] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 976.509784][T15476] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 976.560457][T13995] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.724963][T15476] F2FS-fs (loop2): invalid crc value [ 976.741422][T13995] usb 1-1: config 0 interface 0 has no altsetting 0 [ 976.761955][T15476] F2FS-fs (loop2): Found nat_bits in checkpoint [ 976.768742][T13995] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 976.808572][T13995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.848230][T13995] usb 1-1: config 0 descriptor?? [ 976.999889][T15476] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 977.007669][T15476] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 977.788453][T13995] hid (null): global environment stack underflow [ 977.795319][T13995] hid (null): unknown global tag 0xe [ 978.102174][T15502] xt_l2tp: v2 sid > 0xffff: 117440512 [ 978.978462][ T6] usb 1-1: USB disconnect, device number 20 [ 978.996873][T15513] loop0: detected capacity change from 0 to 128 [ 979.436835][T15513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 979.450566][T15513] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 979.523190][T15513] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 979.584987][T15524] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 979.686536][T14491] EXT4-fs (loop0): unmounting filesystem. [ 982.103475][T15552] loop0: detected capacity change from 0 to 4096 [ 982.110431][T15552] EXT4-fs: Ignoring removed mblk_io_submit option [ 982.235765][T15552] EXT4-fs (loop0): Test dummy encryption mode enabled [ 982.399697][T15552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 982.658777][T15559] loop8: detected capacity change from 0 to 2048 [ 982.769580][T15559] 9pnet_fd: Insufficient options for proto=fd [ 983.032649][T15565] binder: BINDER_SET_CONTEXT_MGR already set [ 983.052804][T15565] binder: 15561:15565 ioctl 4018620d 200000000040 returned -16 [ 983.113956][T14491] EXT4-fs (loop0): unmounting filesystem. [ 983.197074][T15568] loop8: detected capacity change from 0 to 512 [ 983.343889][T15568] EXT4-fs (loop8): 1 orphan inode deleted [ 983.350741][T15568] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 983.364620][T15568] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.480113][T15568] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4065'. [ 984.369553][T13705] EXT4-fs (loop8): unmounting filesystem. [ 984.803452][T15574] loop0: detected capacity change from 0 to 40427 [ 984.810711][T15574] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 984.819109][T15574] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 984.837030][T15574] F2FS-fs (loop0): invalid crc value [ 984.860459][T15574] F2FS-fs (loop0): Found nat_bits in checkpoint [ 984.905602][T15574] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 984.912859][T15574] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 987.038508][T15611] loop2: detected capacity change from 0 to 512 [ 987.050007][T15611] EXT4-fs: Ignoring removed oldalloc option [ 987.056136][T15611] EXT4-fs: Conflicting test_dummy_encryption options [ 987.098588][ T307] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 987.436130][T13767] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 987.572061][T13767] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 987.760808][T15630] loop0: detected capacity change from 0 to 1024 [ 988.618412][T15632] fido_id[15632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 991.377858][T15695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 992.741262][T15714] xt_l2tp: v2 sid > 0xffff: 117440512 [ 992.758133][T15719] incfs: Can't find or create .index dir in ./file0 [ 992.766946][T15719] incfs: mount failed -14 [ 992.793121][T15723] binder: BINDER_SET_CONTEXT_MGR already set [ 992.799667][T15723] binder: 15722:15723 ioctl 4018620d 200000000040 returned -16 [ 994.035029][T15730] loop8: detected capacity change from 0 to 512 [ 994.044848][T15730] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.060483][T15730] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 994.640680][T15733] loop2: detected capacity change from 0 to 256 [ 994.649762][T15733] exfat: Deprecated parameter 'utf8' [ 994.655884][T15733] exfat: Deprecated parameter 'namecase' [ 994.662215][T15733] exfat: Deprecated parameter 'utf8' [ 994.668636][T15733] exfat: Bad value for 'gid' [ 994.983763][T15730] EXT4-fs (loop8): 1 truncate cleaned up [ 994.989830][T15730] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 995.402480][T13705] EXT4-fs (loop8): unmounting filesystem. [ 1000.003928][T15801] loop0: detected capacity change from 0 to 256 [ 1000.025974][T15807] fuse: Bad value for 'fd' [ 1000.049063][T15801] exfat: Deprecated parameter 'utf8' [ 1000.068134][T15801] exfat: Deprecated parameter 'namecase' [ 1000.104729][T15801] exfat: Deprecated parameter 'utf8' [ 1000.112259][T15801] exfat: Bad value for 'gid' [ 1002.959894][T15848] fuse: Bad value for 'fd' [ 1005.828050][T15881] fuse: Unknown parameter '0x0000000000000004' [ 1006.916348][T15873] serio: Serial port ptm0 [ 1006.943930][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4167'. [ 1007.818992][T15917] loop2: detected capacity change from 0 to 512 [ 1007.828898][T15917] EXT4-fs: Ignoring removed mblk_io_submit option [ 1007.838180][T15917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1007.893423][T15917] EXT4-fs (loop2): 1 truncate cleaned up [ 1007.899390][T15917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1008.122445][T15922] fuse: Unknown parameter '0x0000000000000004' [ 1009.565739][T15938] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4179'. [ 1009.723779][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1009.769905][T15948] tipc: Failed to remove unknown binding: 66,1,1/0:3446022109/3446022111 [ 1010.252164][T15963] fuse: Unknown parameter '0x0000000000000004' [ 1011.502062][T15439] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1011.529317][T15439] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1012.021993][T15991] tipc: Failed to remove unknown binding: 66,1,1/0:1503252488/1503252490 [ 1012.344479][T15989] fido_id[15989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1013.458541][T16022] fuse: Unknown parameter '0x0000000000000004' [ 1015.694440][T16040] loop0: detected capacity change from 0 to 512 [ 1015.704321][T16040] EXT4-fs: Ignoring removed bh option [ 1015.763350][T16040] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1015.795594][T16040] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1016.215859][T16048] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4213: Directory hole found for htree leaf block 0 [ 1016.231472][T16048] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1016.241538][T16048] overlayfs: conflicting lowerdir path [ 1017.237029][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1017.255006][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1017.404663][T16062] fuse: Unknown parameter '0x0000000000000004' [ 1020.512857][T16095] loop2: detected capacity change from 0 to 512 [ 1020.557979][T16095] EXT4-fs: Ignoring removed bh option [ 1020.680163][T16095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1020.697657][T16095] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.901484][T16106] loop0: detected capacity change from 0 to 512 [ 1020.917707][T16106] EXT4-fs: Ignoring removed bh option [ 1021.082884][T16108] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.4228: Directory hole found for htree leaf block 0 [ 1021.100436][T16108] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1021.110660][T16108] overlayfs: conflicting lowerdir path [ 1021.221350][T16106] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1021.237361][T16106] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.444560][T16117] fuse: Unknown parameter 'fd0x0000000000000004' [ 1021.470263][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1021.493036][T16118] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4231: Directory hole found for htree leaf block 0 [ 1021.506915][T16118] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1021.516664][T16118] overlayfs: conflicting lowerdir path [ 1021.774392][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1022.134572][T16138] loop0: detected capacity change from 0 to 512 [ 1023.100803][T16142] loop2: detected capacity change from 0 to 512 [ 1023.108957][T16142] EXT4-fs: Ignoring removed bh option [ 1023.116399][T16138] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1023.132390][T16142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1023.147073][T16142] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.157669][T16138] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.481730][T16153] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.4242: Directory hole found for htree leaf block 0 [ 1023.498668][T16153] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1023.508739][T16153] overlayfs: conflicting lowerdir path [ 1023.616362][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1023.714834][T16160] loop0: detected capacity change from 0 to 512 [ 1023.732222][T16160] EXT4-fs: Ignoring removed bh option [ 1023.772041][T16160] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1023.781843][T16160] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.208536][T16168] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4245: Directory hole found for htree leaf block 0 [ 1024.227659][T16168] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1024.237760][T16168] overlayfs: conflicting lowerdir path [ 1024.266470][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1024.557712][T16176] overlayfs: failed to clone upperpath [ 1024.681728][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1027.008623][T16202] loop2: detected capacity change from 0 to 512 [ 1027.040396][T16202] EXT4-fs: Ignoring removed bh option [ 1027.313460][T16202] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1027.369730][T16202] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.078721][T16210] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.4257: Directory hole found for htree leaf block 0 [ 1028.092450][T16210] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1028.102215][T16210] overlayfs: conflicting lowerdir path [ 1028.133008][T16183] loop0: detected capacity change from 0 to 40427 [ 1028.185853][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1028.195718][T16183] F2FS-fs (loop0): invalid crc value [ 1028.226625][T16183] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1028.411699][T16183] F2FS-fs (loop0): Start checkpoint disabled! [ 1028.614702][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1028.624772][T16223] device bridge_slave_1 left promiscuous mode [ 1028.633220][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.672407][T16223] device bridge_slave_0 left promiscuous mode [ 1028.680012][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.813390][T14349] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1031.075086][T14349] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1031.438664][T16245] fido_id[16245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1032.315722][T16260] loop0: detected capacity change from 0 to 512 [ 1032.540662][T16260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1032.550313][T16260] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.239354][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1033.517549][T16276] loop0: detected capacity change from 0 to 512 [ 1033.532215][T16276] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.974352][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4274'. [ 1037.904647][T16276] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1037.919818][T16276] EXT4-fs: failed to create workqueue [ 1037.925265][T16276] EXT4-fs (loop0): mount failed [ 1038.307586][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1039.269233][T16302] loop0: detected capacity change from 0 to 256 [ 1039.418960][T16306] loop0: detected capacity change from 0 to 512 [ 1039.477739][T16306] EXT4-fs: Ignoring removed bh option [ 1039.820471][T16306] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1039.919178][T16306] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.534031][T16325] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4283: Directory hole found for htree leaf block 0 [ 1040.555339][T16325] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1040.565188][T16325] overlayfs: conflicting lowerdir path [ 1041.200323][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1041.632177][T16317] loop2: detected capacity change from 0 to 40427 [ 1041.683088][T16317] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1041.706551][T16317] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1041.726637][T16317] F2FS-fs (loop2): invalid crc value [ 1041.757768][T16317] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1041.815200][T16317] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1041.822356][T16317] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1042.583722][T16334] loop0: detected capacity change from 0 to 40427 [ 1042.736770][T16334] F2FS-fs (loop0): invalid crc value [ 1042.772820][T16334] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1043.200830][T16334] F2FS-fs (loop0): Start checkpoint disabled! [ 1043.249084][T16334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1044.101438][T16363] tipc: Failed to remove unknown binding: 66,1,1/0:2029889373/2029889375 [ 1046.513825][T16382] loop0: detected capacity change from 0 to 256 [ 1046.528959][T16382] exfat: Deprecated parameter 'utf8' [ 1046.535129][T16382] exfat: Deprecated parameter 'namecase' [ 1046.541221][T16382] exfat: Deprecated parameter 'utf8' [ 1046.546871][T16382] exfat: Bad value for 'gid' [ 1046.932004][ T28] audit: type=1400 audit(1751888249.204:1749): avc: denied { accept } for pid=16383 comm="syz.3.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1047.646509][ T28] audit: type=1326 audit(1751888249.914:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1047.685704][ T28] audit: type=1326 audit(1751888249.914:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1047.720960][ T28] audit: type=1326 audit(1751888249.914:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1049.107996][ T28] audit: type=1326 audit(1751888249.914:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1049.134773][ T28] audit: type=1326 audit(1751888249.914:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16392 comm="syz.0.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1054.152772][T16470] loop2: detected capacity change from 0 to 512 [ 1054.160119][T16470] EXT4-fs: Ignoring removed mblk_io_submit option [ 1055.686201][T16470] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1055.776642][T16470] EXT4-fs (loop2): 1 truncate cleaned up [ 1055.782568][T16470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1055.956432][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1057.416959][T16488] loop2: detected capacity change from 0 to 128 [ 1057.434824][T16488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1057.441865][T16488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1058.450131][T16488] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1058.484864][T16493] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4336'. [ 1058.620488][T16488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1058.629317][T16488] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.902893][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1059.808426][T16521] loop0: detected capacity change from 0 to 512 [ 1059.906736][T16521] EXT4-fs: Ignoring removed bh option [ 1060.523890][T16525] virtiofs: Unknown parameter 'always' [ 1061.859335][T16533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4348'. [ 1061.868605][T16521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1061.880659][T16521] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.028470][T16540] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4350'. [ 1062.039997][T16541] syz.7.4351[16541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.040083][T16541] syz.7.4351[16541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1062.367389][T16544] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4345: Directory hole found for htree leaf block 0 [ 1062.393063][T16544] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1062.402793][T16544] overlayfs: conflicting lowerdir path [ 1062.492103][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1068.684050][T16575] fuse: Bad value for 'fd' [ 1068.728522][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4362'. [ 1068.826426][T16581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1070.051162][T16604] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4368'. [ 1070.060264][T16604] device bridge_slave_1 left promiscuous mode [ 1070.067164][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.182380][T16604] device bridge_slave_0 left promiscuous mode [ 1070.190344][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.648880][T16610] fuse: Bad value for 'fd' [ 1071.772957][T16615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4375'. [ 1072.136276][T16622] loop2: detected capacity change from 0 to 512 [ 1072.159532][T16622] EXT4-fs: Ignoring removed bh option [ 1072.223725][T16622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1072.310244][T16622] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.606444][T16640] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.4377: Directory hole found for htree leaf block 0 [ 1072.647907][T16640] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1072.657633][T16640] overlayfs: conflicting lowerdir path [ 1074.539805][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1074.658083][T16661] loop0: detected capacity change from 0 to 256 [ 1074.664792][T16661] exfat: Deprecated parameter 'utf8' [ 1074.670196][T16661] exfat: Deprecated parameter 'namecase' [ 1074.675889][T16661] exfat: Deprecated parameter 'utf8' [ 1074.681239][T16661] exfat: Bad value for 'gid' [ 1074.863743][T16619] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1075.110359][T16679] overlayfs: failed to clone upperpath [ 1076.285575][T16690] loop0: detected capacity change from 0 to 512 [ 1076.338292][T16690] EXT4-fs: Ignoring removed bh option [ 1076.395112][T16690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1076.418344][T16690] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1076.667437][T16704] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #12: comm syz.0.4398: Directory hole found for htree leaf block 0 [ 1076.683167][T16704] overlayfs: failed to create directory ./file0/work (errno: 117); mounting read-only [ 1076.693329][T16704] overlayfs: conflicting lowerdir path [ 1077.236930][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1078.833528][T16732] overlayfs: failed to clone upperpath [ 1079.109699][ T28] audit: type=1326 audit(1751888281.384:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9434b8e929 code=0x7ffc0000 [ 1079.157578][ T28] audit: type=1326 audit(1751888281.414:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9434b8e929 code=0x7ffc0000 [ 1079.227312][ T28] audit: type=1326 audit(1751888281.414:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9434b8e929 code=0x7ffc0000 [ 1079.251492][ T28] audit: type=1326 audit(1751888281.414:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f9434b8e929 code=0x7ffc0000 [ 1079.285203][ T28] audit: type=1326 audit(1751888281.414:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16734 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9434b8e929 code=0x7ffc0000 [ 1079.861829][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4414'. [ 1080.742835][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4421'. [ 1082.425438][T16785] loop2: detected capacity change from 0 to 2048 [ 1082.515929][T16785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1083.266823][T15312] EXT4-fs (loop2): unmounting filesystem. [ 1084.526178][T16821] overlayfs: failed to clone upperpath [ 1084.532776][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4438'. [ 1085.190459][T16843] loop0: detected capacity change from 0 to 2048 [ 1086.341023][T16843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1086.823524][T16858] overlayfs: failed to clone upperpath [ 1086.889956][T16859] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1086.933719][T16859] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1087.068554][T16859] device vti0 left promiscuous mode [ 1087.079091][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1087.099335][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1087.108161][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1087.108322][T14491] EXT4-fs (loop0): unmounting filesystem. [ 1087.116523][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1087.131681][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1087.150343][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1087.158827][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1087.167143][ T3869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1087.456480][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1090.483057][T16919] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4470'. [ 1090.672044][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4476'. [ 1091.741570][T16953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1093.670229][T16968] overlayfs: failed to clone upperpath [ 1093.678449][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4487'. [ 1095.018820][T16981] overlayfs: failed to clone upperpath [ 1095.485675][ T8314] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1095.527237][ T8314] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1095.601427][T16992] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4493'. [ 1096.153939][T16995] fido_id[16995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1097.183879][T17011] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1097.701931][T17023] overlayfs: failed to clone upperpath [ 1097.969137][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1099.116392][T17044] device vti0 entered promiscuous mode [ 1101.817453][T17073] overlayfs: failed to clone upperpath [ 1103.032967][T17082] device vti0 entered promiscuous mode [ 1106.118356][T17133] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1106.301853][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1106.317477][T17138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1106.363228][T17138] device vti0 left promiscuous mode [ 1106.378911][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1106.398257][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1106.399595][T17138] xt_hashlimit: size too large, truncated to 1048576 [ 1106.428095][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1106.463908][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1106.527662][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1106.535918][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1106.567628][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1106.587673][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1106.598028][T17139] tipc: Started in network mode [ 1106.607897][T17139] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1106.637501][T17139] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1106.666116][T17139] tipc: Enabled bearer , priority 10 [ 1107.261502][T17152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17152 comm=syz.3.4547 [ 1107.286559][T17152] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17152 comm=syz.3.4547 [ 1109.437594][ T8314] tipc: Node number set to 1 [ 1110.850402][T17186] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1111.068949][T17194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1111.105471][T17194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1111.141124][T17194] device vti0 left promiscuous mode [ 1111.157841][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1111.168339][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1111.176713][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1111.187135][T17202] tipc: Failed to remove unknown binding: 66,1,1/0:2755983219/2755983221 [ 1111.192959][T17194] xt_hashlimit: size too large, truncated to 1048576 [ 1111.203322][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1111.339096][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1111.415864][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1111.500755][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1111.509760][ T2176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1111.518433][T17199] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4562'. [ 1111.528662][T17197] tipc: Started in network mode [ 1111.533997][T17197] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1111.597670][T17197] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1111.617472][T17197] tipc: Enabled bearer , priority 10 [ 1112.837612][ T6140] tipc: Node number set to 1 [ 1113.370742][T17235] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1113.818962][T17237] overlayfs: failed to clone upperpath [ 1113.825073][T17237] overlayfs: failed to clone upperpath [ 1115.870748][T17266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1116.997348][T17266] tipc: Started in network mode [ 1117.002341][T17266] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1117.147419][T17269] xt_hashlimit: size too large, truncated to 1048576 [ 1117.238822][T17266] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1117.585152][T17266] tipc: Enabled bearer , priority 10 [ 1117.872456][T17292] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1118.763710][ T6140] tipc: Node number set to 1 [ 1120.333293][T17315] overlayfs: failed to clone upperpath [ 1120.757487][T17323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4599'. [ 1123.353031][T17351] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1123.619478][T17355] overlayfs: failed to clone upperpath [ 1126.307140][T17371] overlayfs: failed to resolve './file1': -2 [ 1126.721042][T17378] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4611'. [ 1126.964364][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4616'. [ 1127.190302][T17385] tipc: Failed to remove unknown binding: 66,1,1/0:371300283/371300285 [ 1129.967694][T17422] overlayfs: failed to resolve './file1': -2 [ 1130.222664][T17434] tipc: Failed to remove unknown binding: 66,1,1/1:1933468456/1933468458 [ 1130.694805][T17438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1130.713021][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4639'. [ 1132.576388][T17469] tipc: Failed to remove unknown binding: 66,1,1/0:1903058672/1903058674 [ 1132.813615][T17486] overlayfs: failed to resolve './file1': -2 [ 1132.931682][T17490] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1135.909250][T17510] overlayfs: failed to clone upperpath [ 1137.260827][T17515] tipc: Failed to remove unknown binding: 66,1,1/0:3995171472/3995171474 [ 1137.431980][T17533] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4669'. [ 1143.578791][T17547] overlayfs: failed to clone upperpath [ 1143.876715][T17558] overlayfs: failed to clone upperpath [ 1145.648598][T17586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 1148.104841][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4706'. [ 1149.495047][T17657] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1149.739298][T17647] overlayfs: failed to clone upperpath [ 1150.498500][T17680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4722'. [ 1150.615781][T17683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4724'. [ 1155.162621][T17724] overlayfs: failed to clone upperpath [ 1155.460466][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4744'. [ 1160.441853][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1160.874784][T17788] overlayfs: failed to clone upperpath [ 1160.990354][T17794] fuse: Bad value for 'user_id' [ 1164.080936][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1164.419919][T17814] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4766'. [ 1164.773033][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4770'. [ 1165.104232][T17832] fuse: Bad value for 'user_id' [ 1165.204399][T17839] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1167.446821][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4783'. [ 1167.796610][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4782'. [ 1167.973939][T17878] fuse: Bad value for 'user_id' [ 1168.368850][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4786'. [ 1169.446960][ T28] audit: type=1326 audit(1751888371.714:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.0.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1169.518199][ T28] audit: type=1326 audit(1751888371.754:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.0.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1169.542192][ T28] audit: type=1326 audit(1751888371.754:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.0.4793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1171.394505][T17930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4801'. [ 1172.126022][T17951] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4809'. [ 1174.253122][T17970] overlayfs: failed to clone upperpath [ 1180.945112][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4836'. [ 1181.864329][T18065] overlayfs: failed to resolve './file2': -2 [ 1183.849682][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4854'. [ 1185.988491][T18122] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4862'. [ 1187.656117][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1189.742134][T18167] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4878'. [ 1189.770803][ T28] audit: type=1400 audit(1751888392.044:1763): avc: denied { getattr } for pid=18168 comm="syz.2.4881" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1189.854451][T18175] fuse: Unknown parameter 'use00000000000000000000' [ 1190.149577][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4885'. [ 1190.360697][T18185] xt_hashlimit: size too large, truncated to 1048576 [ 1193.905858][T18213] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4895'. [ 1193.987247][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4890'. [ 1196.364074][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4899'. [ 1196.527853][ T28] audit: type=1400 audit(1751888398.014:1764): avc: denied { setopt } for pid=18222 comm="syz.0.4897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1196.571688][T18235] xt_hashlimit: size too large, truncated to 1048576 [ 1196.588523][T18237] device wg2 entered promiscuous mode [ 1196.744816][T18246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1198.288509][T18253] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1198.389019][T18261] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1198.436108][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4907'. [ 1198.587034][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4911'. [ 1198.654537][T18272] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4914'. [ 1198.760465][T18280] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1198.829454][T18286] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1198.838299][T18286] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1199.229360][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1199.708213][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1199.826431][T18309] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4928'. [ 1200.023256][T18320] tipc: Failed to remove unknown binding: 66,1,1/1:1211774120/1211774122 [ 1200.440030][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4937'. [ 1201.078540][T18339] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4940'. [ 1201.121319][T18346] tipc: Failed to remove unknown binding: 66,3,3/1:2037775923/2037775924 [ 1201.188577][T18352] tipc: Failed to remove unknown binding: 66,1,1/1:3845763904/3845763906 [ 1201.225697][ T28] audit: type=1400 audit(1751888403.494:1765): avc: denied { create } for pid=18342 comm="syz.3.4942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1201.975816][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4951'. [ 1203.613871][T18389] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4956'. [ 1203.628398][T18389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1203.865136][ T28] audit: type=1400 audit(1751888405.884:1766): avc: denied { nlmsg_read } for pid=18385 comm="syz.0.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1204.033391][T18395] tipc: Failed to remove unknown binding: 66,1,1/0:1200786361/1200786363 [ 1204.076267][T18395] device vti0 entered promiscuous mode [ 1204.097639][T18402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4962'. [ 1205.782514][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4965'. [ 1206.539578][T18430] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1206.554739][T18432] device wg2 entered promiscuous mode [ 1206.577685][T18433] bridge: RTM_NEWNEIGH with invalid ether address [ 1206.701178][T18439] tipc: Failed to remove unknown binding: 66,1,1/0:655461149/655461151 [ 1206.860178][T18442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4974'. [ 1209.849262][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4983'. [ 1209.906206][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4985'. [ 1212.427199][ T28] audit: type=1400 audit(1751888414.694:1767): avc: denied { mounton } for pid=18495 comm="syz.2.4990" path="/191/bus" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1215.480812][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1215.489922][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5014'. [ 1216.391929][T18574] fuse: Bad value for 'fd' [ 1218.073894][T18597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18597 comm=syz.8.5025 [ 1218.110182][T18597] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18597 comm=syz.8.5025 [ 1218.518043][T18608] fuse: Bad value for 'fd' [ 1218.556839][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5031'. [ 1219.241782][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5037'. [ 1219.525895][T18637] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1219.604006][T18639] xt_hashlimit: size too large, truncated to 1048576 [ 1220.038761][T18645] fuse: Unknown parameter '00000000000000000003' [ 1220.352069][ T28] audit: type=1400 audit(1751888422.624:1768): avc: denied { map } for pid=18658 comm="syz.2.5048" path="socket:[71204]" dev="sockfs" ino=71204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1220.375586][ T28] audit: type=1400 audit(1751888422.624:1769): avc: denied { read accept } for pid=18658 comm="syz.2.5048" path="socket:[71204]" dev="sockfs" ino=71204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1220.565054][T18664] 9pnet_fd: Insufficient options for proto=fd [ 1220.930738][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1221.188969][T18674] fuse: Unknown parameter '00000000000000000003' [ 1221.718732][T18681] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1224.068671][T18713] tipc: Failed to remove unknown binding: 66,1,1/1:3646869565/3646869567 [ 1224.667736][T18727] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1226.300719][T18773] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1228.345286][T18813] tipc: Failed to remove unknown binding: 66,1,1/1:1460546988/1460546990 [ 1228.505437][ T28] audit: type=1400 audit(1751888430.774:1770): avc: denied { execute } for pid=18814 comm="syz.7.5101" name="file0" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1228.890007][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5103'. [ 1229.957780][ T28] audit: type=1400 audit(1751888430.804:1771): avc: denied { execute_no_trans } for pid=18814 comm="syz.7.5101" path="/299/file0" dev="tmpfs" ino=1651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1230.632281][ T28] audit: type=1326 audit(1751888432.904:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1231.794896][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5106'. [ 1232.050368][T18847] device wg2 left promiscuous mode [ 1232.064448][ T28] audit: type=1326 audit(1751888434.144:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1232.136712][ T28] audit: type=1326 audit(1751888434.144:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1232.169676][T18847] device wg2 entered promiscuous mode [ 1232.207199][ T28] audit: type=1326 audit(1751888434.154:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1232.668805][T18860] overlayfs: missing 'workdir' [ 1233.107245][ T28] audit: type=1326 audit(1751888434.154:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1233.203738][ T28] audit: type=1326 audit(1751888434.154:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1233.232945][ T28] audit: type=1326 audit(1751888434.154:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18840 comm="syz.0.5107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3cc98e929 code=0x7ffc0000 [ 1234.131873][T18886] device wg2 entered promiscuous mode [ 1235.695176][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5126'. [ 1236.324417][T18915] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1236.334097][T18915] FAT-fs (loop17): unable to read boot sector [ 1237.277928][T18917] overlayfs: failed to resolve './file2': -2 [ 1237.362512][T18921] tipc: Failed to remove unknown binding: 66,1,1/1:278569707/278569709 [ 1238.374423][T18931] device wg2 left promiscuous mode [ 1238.602982][T18931] device wg2 entered promiscuous mode [ 1238.655863][T18939] device veth1_macvtap left promiscuous mode [ 1238.664612][T18939] device macsec0 entered promiscuous mode [ 1238.866225][T18958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5145'. [ 1240.930049][T18961] tipc: Failed to remove unknown binding: 66,1,1/0:3758233376/3758233378 [ 1240.953802][T18961] device vti0 entered promiscuous mode [ 1241.610346][T19000] tipc: Failed to remove unknown binding: 66,1,1/0:2837045350/2837045352 [ 1241.980543][T19021] device wg2 left promiscuous mode [ 1242.000789][T19021] device wg2 entered promiscuous mode [ 1244.101740][T19064] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1244.146688][T19069] device wg2 entered promiscuous mode [ 1244.203890][T19073] device veth1_macvtap left promiscuous mode [ 1244.212433][T19073] device macsec0 entered promiscuous mode [ 1244.458834][T19081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 1244.499682][T19075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1244.523686][T19075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1246.257606][T19103] device wg2 left promiscuous mode [ 1246.294794][T19103] device wg2 entered promiscuous mode [ 1246.787240][ T28] audit: type=1400 audit(1751888449.014:1779): avc: denied { write } for pid=19108 comm="syz.8.5210" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1246.977432][T19123] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1248.101220][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5218'. [ 1248.231475][T19147] device wg2 left promiscuous mode [ 1248.241182][T19147] device wg2 entered promiscuous mode [ 1248.257683][ T28] audit: type=1400 audit(1751888450.534:1780): avc: denied { remount } for pid=19148 comm="syz.8.5223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1248.308522][T19155] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5226'. [ 1249.048904][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5227'. [ 1249.211760][T19178] device macsec1 entered promiscuous mode [ 1249.218173][T19178] device vlan1 entered promiscuous mode [ 1249.230974][T19178] device vlan1 left promiscuous mode [ 1249.357646][T19183] device wg2 entered promiscuous mode [ 1249.621668][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'. [ 1251.247268][T19218] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5249'. [ 1251.496795][T19230] tipc: Failed to remove unknown binding: 66,1,1/1:1383154810/1383154812 [ 1251.910296][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5257'. [ 1252.416794][T19253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1258.734656][T19321] device veth1_macvtap left promiscuous mode [ 1258.749708][T19321] device macsec0 entered promiscuous mode [ 1258.965706][T19331] overlayfs: failed to clone upperpath [ 1259.302713][T19338] tmpfs: Unknown parameter 'n' [ 1263.422498][T19452] device veth1_macvtap left promiscuous mode [ 1263.428728][T19452] device macsec0 entered promiscuous mode [ 1264.689097][T19496] tmpfs: Unknown parameter 'n' [ 1265.443015][T19515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1265.685732][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5363'. [ 1265.694970][T19521] device bridge_slave_1 left promiscuous mode [ 1265.701740][T19521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.825718][T19521] device bridge_slave_0 left promiscuous mode [ 1265.833231][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.679816][T19550] overlayfs: failed to clone upperpath [ 1270.159890][T19579] device wg2 left promiscuous mode [ 1270.181038][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5381'. [ 1270.193704][T19582] device wg2 entered promiscuous mode [ 1271.467612][T19590] netlink: 'syz.0.5386': attribute type 4 has an invalid length. [ 1273.963894][T19609] overlayfs: failed to clone upperpath [ 1274.853118][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5389'. [ 1275.761754][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5397'. [ 1277.267747][T19645] device wg2 left promiscuous mode [ 1277.293493][T19645] device wg2 entered promiscuous mode [ 1277.370338][T19646] overlayfs: failed to clone upperpath [ 1278.854303][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 1282.697278][T19703] tipc: Failed to remove unknown binding: 66,1,1/0:2111639890/2111639892 [ 1282.957723][T19715] device macsec1 entered promiscuous mode [ 1282.978727][T19715] device vlan1 entered promiscuous mode [ 1282.985753][T19715] device vlan1 left promiscuous mode [ 1283.075722][T19723] overlayfs: failed to clone upperpath [ 1283.489923][T19730] device lo entered promiscuous mode [ 1283.496405][T19730] device tunl0 entered promiscuous mode [ 1283.506933][T19730] device gre0 entered promiscuous mode [ 1283.518018][T19730] device gretap0 entered promiscuous mode [ 1283.547208][T19730] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1283.619284][ T28] audit: type=1326 audit(1751888485.894:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.2.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1283.661348][ T28] audit: type=1326 audit(1751888485.914:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.2.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1283.696886][ T28] audit: type=1326 audit(1751888485.914:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19737 comm="syz.2.5439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1286.405165][T19757] tipc: Failed to remove unknown binding: 66,1,1/1:2267248161/2267248163 [ 1288.751555][T19791] tipc: Failed to remove unknown binding: 66,1,1/0:3503960308/3503960310 [ 1288.912857][T19800] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1288.922086][T19800] FAT-fs (loop1): unable to read boot sector [ 1289.865321][T19838] 9pnet_fd: Insufficient options for proto=fd [ 1290.040663][T19852] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1290.050160][T19852] FAT-fs (loop15): unable to read boot sector [ 1290.870058][T19876] 9pnet_fd: Insufficient options for proto=fd [ 1293.683162][T19923] device veth1_macvtap left promiscuous mode [ 1293.704387][T19923] device macsec0 entered promiscuous mode [ 1295.133830][T19957] xt_hashlimit: size too large, truncated to 1048576 [ 1295.672700][T19966] 9pnet_fd: Insufficient options for proto=fd [ 1297.184051][T19988] xt_l2tp: v2 sid > 0xffff: 117440512 [ 1297.445030][T20001] xt_hashlimit: size too large, truncated to 1048576 [ 1297.771715][T20015] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1297.781475][T20015] FAT-fs (loop5): unable to read boot sector [ 1298.143626][T20072] 9pnet_fd: Insufficient options for proto=fd [ 1298.798206][T20110] xt_hashlimit: size too large, truncated to 1048576 [ 1299.772152][T20137] 9pnet_fd: Insufficient options for proto=fd [ 1300.029688][T20146] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1300.039018][T20146] FAT-fs (loop1): unable to read boot sector [ 1300.609542][T20160] tmpfs: Unknown parameter 'n' [ 1301.291772][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5575'. [ 1301.343518][T20170] device wg2 left promiscuous mode [ 1301.390385][T20170] device wg2 entered promiscuous mode [ 1301.840498][T20193] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1301.849833][T20193] FAT-fs (loop15): unable to read boot sector [ 1303.013140][T20206] device wg2 left promiscuous mode [ 1303.042414][T20206] device wg2 entered promiscuous mode [ 1303.084296][T20221] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5598'. [ 1304.396459][T20252] device wg2 left promiscuous mode [ 1304.433221][T20252] device wg2 entered promiscuous mode [ 1304.442121][T20254] 9pnet_fd: p9_fd_create_tcp (20254): problem connecting socket to 127.0.0.1 [ 1304.691084][T20268] tipc: New replicast peer: 0.0.0.0 [ 1305.595146][T20268] tipc: Enabled bearer , priority 10 [ 1305.879782][T20272] tipc: New replicast peer: fe80:0000:6578:7434:0000:0000:0000:00aa [ 1306.814677][T20293] device wg2 left promiscuous mode [ 1306.821049][T20292] 9pnet_fd: p9_fd_create_tcp (20292): problem connecting socket to 127.0.0.1 [ 1306.857834][T20293] device wg2 entered promiscuous mode [ 1309.167527][T20331] device wg2 left promiscuous mode [ 1309.187695][T20331] device wg2 entered promiscuous mode [ 1309.711302][T20335] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1310.066170][T20335] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1310.106461][T20335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1310.122285][T20335] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1310.141522][T20335] device wg2 left promiscuous mode [ 1310.184346][T20335] device veth1_macvtap entered promiscuous mode [ 1310.206345][T20335] device macsec0 left promiscuous mode [ 1310.236288][T20335] device vti0 left promiscuous mode [ 1310.258214][T20340] tipc: Started in network mode [ 1310.273361][T20340] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1310.371127][T20340] tipc: Enabling of bearer rejected, failed to enable media [ 1310.393025][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1310.403370][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1310.629401][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1310.748003][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1310.756541][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1310.773539][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1310.796300][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1310.816613][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1310.830746][T20063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1310.891848][T15859] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1310.904037][T15859] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1310.917901][T15859] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1311.077187][ T301] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1311.737336][ T301] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1311.974569][T20378] device wg2 left promiscuous mode [ 1311.991427][T20378] device wg2 entered promiscuous mode [ 1313.242059][T20396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5658'. [ 1315.257244][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1315.447616][T20426] overlayfs: failed to clone upperpath [ 1316.050891][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5670'. [ 1316.479094][T20485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1316.626625][T20478] overlayfs: failed to clone upperpath [ 1316.742221][T20495] overlayfs: failed to clone upperpath [ 1317.602037][T20546] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1317.611665][T20546] FAT-fs (loop1): unable to read boot sector [ 1317.659994][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1318.942872][T20578] overlayfs: failed to clone upperpath [ 1319.596751][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1320.376544][T20611] 9pnet_fd: p9_fd_create_tcp (20611): problem connecting socket to 127.0.0.1 [ 1320.932526][T20624] overlayfs: failed to clone upperpath [ 1321.959906][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5728'. [ 1323.396820][T20667] overlayfs: failed to clone upperpath [ 1323.747230][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1326.539243][T20716] overlayfs: failed to clone upperpath [ 1326.676654][T20719] 9pnet_fd: Insufficient options for proto=fd [ 1326.825319][T20722] tipc: Failed to remove unknown binding: 66,1,1/0:2145543932/2145543934 [ 1327.078512][T20746] 9pnet_fd: Insufficient options for proto=fd [ 1328.651312][T20774] device wg2 entered promiscuous mode [ 1328.937651][ T28] audit: type=1326 audit(1751888531.154:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.237601][ T28] audit: type=1326 audit(1751888531.154:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.273421][ T28] audit: type=1326 audit(1751888531.164:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.297448][ T28] audit: type=1326 audit(1751888531.164:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.337192][ T28] audit: type=1326 audit(1751888531.164:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.361197][ T28] audit: type=1326 audit(1751888531.164:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.377572][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5781'. [ 1329.395748][ T28] audit: type=1326 audit(1751888531.174:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.420135][ T28] audit: type=1326 audit(1751888531.174:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.444224][ T28] audit: type=1326 audit(1751888531.194:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1329.547042][ T28] audit: type=1326 audit(1751888531.194:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20771 comm="syz.8.5777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1331.276874][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5803'. [ 1335.288848][T20873] device wg2 left promiscuous mode [ 1335.306195][T20873] device wg2 entered promiscuous mode [ 1336.305393][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1336.629933][T20891] ip_tunnel: non-ECT from 172.20.20.35 with TOS=0x3 [ 1336.648158][T20893] device macsec1 entered promiscuous mode [ 1336.653927][T20893] device vlan1 entered promiscuous mode [ 1336.669670][T20893] device vlan1 left promiscuous mode [ 1337.145613][T20907] device wg2 left promiscuous mode [ 1337.160897][T20907] device wg2 entered promiscuous mode [ 1337.248608][T20910] overlayfs: failed to resolve './file2': -2 [ 1337.379046][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5829'. [ 1338.636785][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5833'. [ 1339.339440][T20938] device wg2 left promiscuous mode [ 1339.360093][T20940] device macsec1 entered promiscuous mode [ 1339.370338][T20940] device vlan1 entered promiscuous mode [ 1339.390955][T20940] device vlan1 left promiscuous mode [ 1339.422311][T20938] device wg2 entered promiscuous mode [ 1339.828815][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1340.788344][T20958] xt_bpf: check failed: parse error [ 1341.657343][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1341.800433][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1341.802331][ T28] audit: type=1400 audit(1751888542.904:1796): avc: denied { bind } for pid=20947 comm="syz.3.5845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1342.035000][T20960] 9pnet_fd: p9_fd_create_tcp (20960): problem connecting socket to 127.0.0.1 [ 1342.130409][T20969] overlayfs: failed to resolve './file2': -2 [ 1342.268616][T20981] device wg2 left promiscuous mode [ 1342.289260][T20981] device wg2 entered promiscuous mode [ 1342.357694][T20984] device macsec1 entered promiscuous mode [ 1342.380188][T20984] device vlan1 entered promiscuous mode [ 1342.541526][T20984] device vlan1 left promiscuous mode [ 1343.427958][T20995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5859'. [ 1344.727775][T21013] tmpfs: Unknown parameter 'n' [ 1345.351620][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5874'. [ 1346.861300][ T28] audit: type=1400 audit(1751888549.134:1797): avc: denied { map } for pid=21051 comm="syz.2.5883" path="socket:[76237]" dev="sockfs" ino=76237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1346.971122][ T28] audit: type=1400 audit(1751888549.134:1798): avc: denied { read } for pid=21051 comm="syz.2.5883" path="socket:[76237]" dev="sockfs" ino=76237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1347.062865][ T28] audit: type=1326 audit(1751888549.134:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.100280][ T28] audit: type=1326 audit(1751888549.134:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.124872][ T28] audit: type=1326 audit(1751888549.134:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.155480][ T28] audit: type=1326 audit(1751888549.134:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.180278][ T28] audit: type=1326 audit(1751888549.134:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.204479][ T28] audit: type=1326 audit(1751888549.134:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f144498d290 code=0x7ffc0000 [ 1347.228720][ T28] audit: type=1326 audit(1751888549.134:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.266233][ T28] audit: type=1326 audit(1751888549.134:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.2.5883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f144498e929 code=0x7ffc0000 [ 1347.739402][T21079] overlayfs: failed to clone upperpath [ 1351.028455][T21112] device macsec1 entered promiscuous mode [ 1351.041944][T21112] device vlan1 entered promiscuous mode [ 1351.056394][T21112] device vlan1 left promiscuous mode [ 1351.082898][T21113] overlayfs: failed to resolve './file2': -2 [ 1352.739807][T21148] device wg2 left promiscuous mode [ 1352.747845][T21148] device wg2 entered promiscuous mode [ 1353.738937][T21161] 9pnet_fd: p9_fd_create_tcp (21161): problem connecting socket to 127.0.0.1 [ 1357.221882][T21193] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5932'. [ 1357.541530][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1357.544646][ T28] audit: type=1400 audit(1751888559.784:1818): avc: denied { search } for pid=21205 comm="syz.7.5936" name="/" dev="configfs" ino=14039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1357.579753][ T28] audit: type=1400 audit(1751888559.794:1819): avc: denied { read } for pid=21205 comm="syz.7.5936" name="/" dev="configfs" ino=14039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1363.464661][ T28] audit: type=1400 audit(1751888559.794:1820): avc: denied { open } for pid=21205 comm="syz.7.5936" path="/" dev="configfs" ino=14039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1363.498955][T21233] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5945'. [ 1363.578876][ T28] audit: type=1400 audit(1751888559.804:1821): avc: denied { setattr } for pid=21205 comm="syz.7.5936" name="/" dev="configfs" ino=14039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1363.707333][T21243] device macsec1 entered promiscuous mode [ 1363.719801][T21243] device vlan1 entered promiscuous mode [ 1364.390989][T21243] device vlan1 left promiscuous mode [ 1364.497245][ T28] audit: type=1326 audit(1751888566.764:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1364.627203][ T28] audit: type=1326 audit(1751888566.764:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1364.708641][ T28] audit: type=1326 audit(1751888566.764:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1364.733006][ T28] audit: type=1326 audit(1751888566.764:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1364.756807][ T28] audit: type=1326 audit(1751888566.764:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1364.864172][ T28] audit: type=1326 audit(1751888566.764:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1365.368668][ T28] audit: type=1326 audit(1751888566.764:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1365.728071][ T28] audit: type=1326 audit(1751888566.814:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21247 comm="syz.8.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f4993f8e929 code=0x7ffc0000 [ 1365.800649][T20108] tipc: Disabling bearer [ 1365.806848][T20108] tipc: Disabling bearer [ 1365.827109][ C1] ------------[ cut here ]------------ [ 1365.832619][ C1] refcount_t: addition on 0; use-after-free. [ 1365.839077][ C1] WARNING: CPU: 1 PID: 13482 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 1365.848631][ C1] Modules linked in: [ 1365.852581][ C1] CPU: 1 PID: 13482 Comm: syz-executor Not tainted 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1365.862689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1365.872810][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 1365.879023][ C1] Code: 05 01 48 c7 c7 60 a6 a9 85 e8 38 fb dd fe 0f 0b eb df e8 6f b5 0c ff c6 05 cf ab 0b 05 01 48 c7 c7 a0 a5 a9 85 e8 1c fb dd fe <0f> 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a6 a9 [ 1365.898669][ C1] RSP: 0018:ffffc900001b09e0 EFLAGS: 00010246 [ 1365.904763][ C1] RAX: 2c8cd5ca0e6e4b00 RBX: 0000000000000002 RCX: ffff888134c33cc0 [ 1365.912798][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1365.920828][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 1365.928851][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: ffffc900001b0ba0 [ 1365.936948][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff8881299e2200 [ 1365.945058][ C1] FS: 000055558e23c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1365.954043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.960672][ C1] CR2: 0000200000ec0030 CR3: 0000000123cd0000 CR4: 00000000003506a0 [ 1365.968685][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1365.976702][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1365.984742][ C1] Call Trace: [ 1365.988058][ C1] [ 1365.990922][ C1] tipc_crypto_xmit+0x1822/0x2220 [ 1365.995973][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1366.001376][ C1] ? __copy_skb_header+0x49f/0x630 [ 1366.006519][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 1366.011755][ C1] ? __skb_clone+0x47a/0x790 [ 1366.016373][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1366.022223][ C1] ? skb_clone+0x228/0x380 [ 1366.026657][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1366.031630][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.037120][ C1] ? __kasan_check_write+0x14/0x20 [ 1366.042449][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1366.048067][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.053567][ C1] call_timer_fn+0x46/0x2a0 [ 1366.058132][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.063619][ C1] __run_timers+0x639/0x9a0 [ 1366.068192][ C1] ? calc_index+0x200/0x200 [ 1366.072725][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1366.077984][ C1] run_timer_softirq+0x6a/0xf0 [ 1366.082776][ C1] handle_softirqs+0x1d7/0x600 [ 1366.087596][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1366.092824][ C1] __irq_exit_rcu+0x52/0xf0 [ 1366.097432][ C1] irq_exit_rcu+0x9/0x10 [ 1366.101715][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1366.107416][ C1] [ 1366.110376][ C1] [ 1366.113330][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1366.119368][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 1366.125209][ C1] Code: 74 12 48 89 fb 48 c7 c7 40 d2 ed 86 e8 51 0b c4 fc 48 89 df 48 83 3d 46 8c fd 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 23 50 5b fc 65 8b 05 b4 27 12 7b 85 c0 74 03 5b 5d c3 e8 74 34 [ 1366.145139][ C1] RSP: 0018:ffffc9000513f7c8 EFLAGS: 00000246 [ 1366.151256][ C1] RAX: 0000000000000001 RBX: ffffea0004fbea40 RCX: dffffc0000000000 [ 1366.159288][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1366.167383][ C1] RBP: ffffc9000513f7d0 R08: dffffc0000000000 R09: ffffed10277c2b08 [ 1366.175374][ C1] R10: ffffed10277c2b08 R11: 1ffff110277c2b07 R12: ffff88811b89abb0 [ 1366.183431][ C1] R13: 1ffff11023713575 R14: ffff88811b89aba8 R15: ffffc9000513f820 [ 1366.191464][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 1366.196705][ C1] filemap_remove_folio+0x113/0x450 [ 1366.201964][ C1] ? __cfi_filemap_remove_folio+0x10/0x10 [ 1366.207737][ C1] ? truncate_cleanup_folio+0x244/0x2b0 [ 1366.213328][ C1] ? truncate_cleanup_folio+0x259/0x2b0 [ 1366.218944][ C1] ? truncate_inode_folio+0x4d/0x70 [ 1366.224190][ C1] truncate_inode_folio+0x5d/0x70 [ 1366.229290][ C1] shmem_undo_range+0x404/0x1470 [ 1366.234268][ C1] ? shmem_truncate_range+0xc0/0xc0 [ 1366.239541][ C1] ? __kasan_check_write+0x14/0x20 [ 1366.244685][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 1366.249456][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 1366.254695][ C1] shmem_evict_inode+0x242/0xa10 [ 1366.259782][ C1] ? inode_wait_for_writeback+0x1b0/0x200 [ 1366.265535][ C1] ? __cfi_shmem_evict_inode+0x10/0x10 [ 1366.271067][ C1] ? __cfi_wake_bit_function+0x10/0x10 [ 1366.276568][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1366.282528][ C1] ? __cfi_shmem_evict_inode+0x10/0x10 [ 1366.288035][ C1] evict+0x493/0x890 [ 1366.291963][ C1] ? __kasan_check_read+0x11/0x20 [ 1366.297015][ C1] ? preempt_schedule_common+0xbe/0xf0 [ 1366.302541][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 1366.307446][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1366.313110][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1366.318531][ C1] iput+0x620/0x670 [ 1366.322360][ C1] do_unlinkat+0x375/0x6b0 [ 1366.326797][ C1] ? __cfi_do_unlinkat+0x10/0x10 [ 1366.331781][ C1] ? getname_flags+0x206/0x500 [ 1366.336592][ C1] __x64_sys_unlink+0x49/0x50 [ 1366.341312][ C1] x64_sys_call+0x958/0x9a0 [ 1366.345851][ C1] do_syscall_64+0x4c/0xa0 [ 1366.350311][ C1] ? clear_bhb_loop+0x30/0x80 [ 1366.355009][ C1] ? clear_bhb_loop+0x30/0x80 [ 1366.359737][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.365693][ C1] RIP: 0033:0x7f9434b8ded7 [ 1366.370171][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.389816][ C1] RSP: 002b:00007ffd491f9b48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1366.398275][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9434b8ded7 [ 1366.406272][ C1] RDX: 00007ffd491f9b70 RSI: 00007ffd491f9c00 RDI: 00007ffd491f9c00 [ 1366.414282][ C1] RBP: 00007ffd491f9c00 R08: 0000000000000000 R09: 0000000000000000 [ 1366.422307][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd491fac90 [ 1366.430320][ C1] R13: 00007f9434c10925 R14: 000000000014d1ce R15: 00007ffd491facd0 [ 1366.439028][ C1] [ 1366.442153][ C1] ---[ end trace 0000000000000000 ]--- [ 1366.447672][ C1] ------------[ cut here ]------------ [ 1366.453146][ C1] refcount_t: underflow; use-after-free. [ 1366.458932][ C1] WARNING: CPU: 1 PID: 13482 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 1366.468450][ C1] Modules linked in: [ 1366.472364][ C1] CPU: 1 PID: 13482 Comm: syz-executor Tainted: G W 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1366.483978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1366.494096][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 1366.500304][ C1] Code: 05 01 48 c7 c7 a0 a5 a9 85 e8 1c fb dd fe 0f 0b eb c3 e8 53 b5 0c ff c6 05 b4 ab 0b 05 01 48 c7 c7 00 a6 a9 85 e8 00 fb dd fe <0f> 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a5 a9 [ 1366.519958][ C1] RSP: 0018:ffffc900001b09e0 EFLAGS: 00010246 [ 1366.526055][ C1] RAX: 2c8cd5ca0e6e4b00 RBX: 0000000000000003 RCX: ffff888134c33cc0 [ 1366.534160][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1366.542178][ C1] RBP: ffffc900001b09f0 R08: dffffc0000000000 R09: fffff520000360b9 [ 1366.550195][ C1] R10: fffff520000360b9 R11: 1ffff920000360b8 R12: 00000000c0000000 [ 1366.558204][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff8881299e2200 [ 1366.566227][ C1] FS: 000055558e23c500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1366.575207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1366.581831][ C1] CR2: 0000200000ec0030 CR3: 0000000123cd0000 CR4: 00000000003506a0 [ 1366.589840][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1366.597847][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1366.605924][ C1] Call Trace: [ 1366.609231][ C1] [ 1366.612109][ C1] tipc_crypto_xmit+0x195e/0x2220 [ 1366.617199][ C1] ? __cfi_tipc_crypto_xmit+0x10/0x10 [ 1366.622656][ C1] ? __copy_skb_header+0x49f/0x630 [ 1366.627845][ C1] tipc_bearer_xmit_skb+0x226/0x380 [ 1366.633087][ C1] ? __skb_clone+0x47a/0x790 [ 1366.637746][ C1] ? __cfi_tipc_bearer_xmit_skb+0x10/0x10 [ 1366.643493][ C1] ? skb_clone+0x228/0x380 [ 1366.647958][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1366.652922][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.658620][ C1] ? __kasan_check_write+0x14/0x20 [ 1366.663790][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1366.669736][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.675328][ C1] call_timer_fn+0x46/0x2a0 [ 1366.679906][ C1] ? __cfi_tipc_disc_timeout+0x10/0x10 [ 1366.685501][ C1] __run_timers+0x639/0x9a0 [ 1366.690249][ C1] ? calc_index+0x200/0x200 [ 1366.695073][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 1366.700386][ C1] run_timer_softirq+0x6a/0xf0 [ 1366.705200][ C1] handle_softirqs+0x1d7/0x600 [ 1366.710032][ C1] ? irqtime_account_irq+0xc4/0x240 [ 1366.715381][ C1] __irq_exit_rcu+0x52/0xf0 [ 1366.719938][ C1] irq_exit_rcu+0x9/0x10 [ 1366.724203][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1366.729885][ C1] [ 1366.732836][ C1] [ 1366.735776][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1366.741899][ C1] RIP: 0010:_raw_spin_unlock_irq+0x48/0x70 [ 1366.747778][ C1] Code: 74 12 48 89 fb 48 c7 c7 40 d2 ed 86 e8 51 0b c4 fc 48 89 df 48 83 3d 46 8c fd 01 00 74 26 e8 93 0c 00 00 90 fb bf 01 00 00 00 23 50 5b fc 65 8b 05 b4 27 12 7b 85 c0 74 03 5b 5d c3 e8 74 34 [ 1366.767613][ C1] RSP: 0018:ffffc9000513f7c8 EFLAGS: 00000246 [ 1366.773713][ C1] RAX: 0000000000000001 RBX: ffffea0004fbea40 RCX: dffffc0000000000 [ 1366.781759][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 1366.789783][ C1] RBP: ffffc9000513f7d0 R08: dffffc0000000000 R09: ffffed10277c2b08 [ 1366.797834][ C1] R10: ffffed10277c2b08 R11: 1ffff110277c2b07 R12: ffff88811b89abb0 [ 1366.805830][ C1] R13: 1ffff11023713575 R14: ffff88811b89aba8 R15: ffffc9000513f820 [ 1366.813874][ C1] ? _raw_spin_unlock_irq+0x41/0x70 [ 1366.819135][ C1] filemap_remove_folio+0x113/0x450 [ 1366.824407][ C1] ? __cfi_filemap_remove_folio+0x10/0x10 [ 1366.830178][ C1] ? truncate_cleanup_folio+0x244/0x2b0 [ 1366.835763][ C1] ? truncate_cleanup_folio+0x259/0x2b0 [ 1366.841389][ C1] ? truncate_inode_folio+0x4d/0x70 [ 1366.846632][ C1] truncate_inode_folio+0x5d/0x70 [ 1366.851724][ C1] shmem_undo_range+0x404/0x1470 [ 1366.856694][ C1] ? shmem_truncate_range+0xc0/0xc0 [ 1366.861950][ C1] ? __kasan_check_write+0x14/0x20 [ 1366.867120][ C1] ? _raw_spin_lock+0x8e/0xe0 [ 1366.871839][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 1366.877138][ C1] shmem_evict_inode+0x242/0xa10 [ 1366.882229][ C1] ? inode_wait_for_writeback+0x1b0/0x200 [ 1366.888065][ C1] ? __cfi_shmem_evict_inode+0x10/0x10 [ 1366.893560][ C1] ? __cfi_wake_bit_function+0x10/0x10 [ 1366.899096][ C1] ? release_firmware_map_entry+0x194/0x194 [ 1366.905045][ C1] ? __cfi_shmem_evict_inode+0x10/0x10 [ 1366.910582][ C1] evict+0x493/0x890 [ 1366.914507][ C1] ? __kasan_check_read+0x11/0x20 [ 1366.919600][ C1] ? preempt_schedule_common+0xbe/0xf0 [ 1366.925119][ C1] ? proc_nr_inodes+0x2f0/0x2f0 [ 1366.930041][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1366.935746][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 1366.941194][ C1] iput+0x620/0x670 [ 1366.945041][ C1] do_unlinkat+0x375/0x6b0 [ 1366.949523][ C1] ? __cfi_do_unlinkat+0x10/0x10 [ 1366.954499][ C1] ? getname_flags+0x206/0x500 [ 1366.959320][ C1] __x64_sys_unlink+0x49/0x50 [ 1366.964114][ C1] x64_sys_call+0x958/0x9a0 [ 1366.968692][ C1] do_syscall_64+0x4c/0xa0 [ 1366.973129][ C1] ? clear_bhb_loop+0x30/0x80 [ 1366.977861][ C1] ? clear_bhb_loop+0x30/0x80 [ 1366.982563][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.988503][ C1] RIP: 0033:0x7f9434b8ded7 [ 1366.992943][ C1] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.012600][ C1] RSP: 002b:00007ffd491f9b48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1367.021158][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9434b8ded7 [ 1367.029180][ C1] RDX: 00007ffd491f9b70 RSI: 00007ffd491f9c00 RDI: 00007ffd491f9c00 [ 1367.037203][ C1] RBP: 00007ffd491f9c00 R08: 0000000000000000 R09: 0000000000000000 [ 1367.045205][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd491fac90 [ 1367.053222][ C1] R13: 00007f9434c10925 R14: 000000000014d1ce R15: 00007ffd491facd0 [ 1367.061255][ C1] [ 1367.064300][ C1] ---[ end trace 0000000000000000 ]--- [ 1367.070833][T20108] tipc: Left network mode [ 1367.082271][T21268] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5960'. [ 1367.159946][T20108] ------------[ cut here ]------------ [ 1367.165477][T20108] refcount_t: saturated; leaking memory. [ 1367.249796][T20108] WARNING: CPU: 1 PID: 20108 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 1367.259600][T20108] Modules linked in: [ 1367.263525][T20108] CPU: 1 PID: 20108 Comm: kworker/u4:79 Tainted: G W 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1367.275371][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1367.285498][T20108] Workqueue: netns cleanup_net [ 1367.290331][T20108] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 1367.296519][T20108] Code: 05 01 48 c7 c7 00 a6 a9 85 e8 00 fb dd fe 0f 0b eb a7 e8 37 b5 0c ff c6 05 95 ab 0b 05 01 48 c7 c7 40 a5 a9 85 e8 e4 fa dd fe <0f> 0b eb 8b e8 1b b5 0c ff c6 05 7a ab 0b 05 01 48 c7 c7 40 a5 a9 [ 1367.316210][T20108] RSP: 0018:ffffc90000bf77c0 EFLAGS: 00010246 [ 1367.322364][T20108] RAX: 50deb346b2aafc00 RBX: 0000000000000000 RCX: ffff88810fad2880 [ 1367.330399][T20108] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1367.338421][T20108] RBP: ffffc90000bf77d0 R08: dffffc0000000000 R09: fffff5200017ee75 [ 1367.346416][T20108] R10: fffff5200017ee75 R11: 1ffff9200017ee74 R12: 1ffff9200017ef04 [ 1367.354436][T20108] R13: ffffc90000bf7840 R14: 0000000000000000 R15: ffff88810ed8e98c [ 1367.362461][T20108] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1367.371442][T20108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1367.378078][T20108] CR2: 00007f942ac77000 CR3: 00000001218ea000 CR4: 00000000003506a0 [ 1367.386085][T20108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1367.394207][T20108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1367.402255][T20108] Call Trace: [ 1367.405557][T20108] [ 1367.408536][T20108] nf_nat_masq_schedule+0x46b/0x4e0 [ 1367.413786][T20108] ? __kasan_check_write+0x14/0x20 [ 1367.419082][T20108] ? __cfi_device_cmp+0x10/0x10 [ 1367.424066][T20108] ? masq_device_event+0xd0/0xd0 [ 1367.429060][T20108] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1367.434376][T20108] ? rtnl_is_locked+0x15/0x20 [ 1367.439133][T20108] masq_device_event+0x9b/0xd0 [ 1367.443926][T20108] raw_notifier_call_chain+0xa1/0x110 [ 1367.449375][T20108] dev_close_many+0x32d/0x4d0 [ 1367.454076][T20108] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 1367.460912][T20108] ? __cfi_dev_close_many+0x10/0x10 [ 1367.466134][T20108] ? wait_for_common+0x54c/0x620 [ 1367.471141][T20108] ? __kasan_check_read+0x11/0x20 [ 1367.476205][T20108] unregister_netdevice_many+0x439/0x1820 [ 1367.482018][T20108] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1367.488239][T20108] ? unregister_netdevice_queue+0x1aa/0x360 [ 1367.494177][T20108] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1367.500505][T20108] ? rcu_barrier+0x7e/0x600 [ 1367.505053][T20108] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 1367.510421][T20108] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1367.516263][T20108] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1367.522165][T20108] cleanup_net+0x62d/0xb00 [ 1367.526609][T20108] ? __cfi_cleanup_net+0x10/0x10 [ 1367.531622][T20108] process_one_work+0x71f/0xc40 [ 1367.536506][T20108] worker_thread+0xa29/0x11f0 [ 1367.541269][T20108] kthread+0x281/0x320 [ 1367.545358][T20108] ? __cfi_worker_thread+0x10/0x10 [ 1367.550520][T20108] ? __cfi_kthread+0x10/0x10 [ 1367.555135][T20108] ret_from_fork+0x1f/0x30 [ 1367.560173][T20108] [ 1367.563206][T20108] ---[ end trace 0000000000000000 ]--- [ 1367.715333][T20108] ------------[ cut here ]------------ [ 1367.720906][T20108] WARNING: CPU: 1 PID: 20108 at lib/ref_tracker.c:77 ref_tracker_alloc+0x2ae/0x430 [ 1367.730358][T20108] Modules linked in: [ 1367.734303][T20108] CPU: 1 PID: 20108 Comm: kworker/u4:79 Tainted: G W 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1367.746008][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1367.756124][T20108] Workqueue: netns cleanup_net [ 1367.760956][T20108] RIP: 0010:ref_tracker_alloc+0x2ae/0x430 [ 1367.766724][T20108] Code: f9 e5 fe 48 bb 00 00 00 00 00 fc ff df 4c 8b 74 24 08 48 8b 7c 24 10 48 8b 74 24 18 e8 1b 47 66 02 31 c0 eb 6d e8 52 f9 e5 fe <0f> 0b 4d 85 e4 0f 85 09 fe ff ff 4c 8b 64 24 10 4d 8d 74 24 0c 4c [ 1367.786444][T20108] RSP: 0018:ffffc90000bf76a0 EFLAGS: 00010293 [ 1367.792562][T20108] RAX: ffffffff8289fe1e RBX: dffffc0000000000 RCX: ffff88810fad2880 [ 1367.800604][T20108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000bf7760 [ 1367.808638][T20108] RBP: ffffc90000bf77d0 R08: dffffc0000000000 R09: ffffc90000bf76e0 [ 1367.816656][T20108] R10: fffff5200017eeec R11: 1ffff9200017eedc R12: ffff888117016ab8 [ 1367.824721][T20108] R13: ffff88810ed8e9a0 R14: 0000000000000cc0 R15: ffff88810ed8e990 [ 1367.832775][T20108] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1367.841784][T20108] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1367.848407][T20108] CR2: 00007f9435a16f98 CR3: 0000000104213000 CR4: 00000000003506a0 [ 1367.856412][T20108] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1367.864454][T20108] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1367.872485][T20108] Call Trace: [ 1367.875795][T20108] [ 1367.878803][T20108] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1367.884317][T20108] ? kasan_save_alloc_info+0x25/0x30 [ 1367.889713][T20108] ? __kasan_kmalloc+0x95/0xb0 [ 1367.894625][T20108] ? nf_nat_masq_schedule+0x238/0x4e0 [ 1367.900087][T20108] ? kmalloc_trace+0x40/0xb0 [ 1367.904734][T20108] nf_nat_masq_schedule+0x338/0x4e0 [ 1367.910017][T20108] ? __kasan_check_write+0x14/0x20 [ 1367.915178][T20108] ? __cfi_device_cmp+0x10/0x10 [ 1367.920097][T20108] ? masq_device_event+0xd0/0xd0 [ 1367.925076][T20108] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1367.930452][T20108] ? rtnl_is_locked+0x15/0x20 [ 1367.935190][T20108] masq_device_event+0x9b/0xd0 [ 1367.940026][T20108] raw_notifier_call_chain+0xa1/0x110 [ 1367.945446][T20108] dev_close_many+0x32d/0x4d0 [ 1367.950203][T20108] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 1367.957149][T20108] ? __cfi_dev_close_many+0x10/0x10 [ 1367.962415][T20108] ? wait_for_common+0x54c/0x620 [ 1367.967418][T20108] ? __kasan_check_read+0x11/0x20 [ 1367.972514][T20108] unregister_netdevice_many+0x439/0x1820 [ 1367.978293][T20108] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 1367.984504][T20108] ? unregister_netdevice_queue+0x1aa/0x360 [ 1367.990466][T20108] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 1367.996774][T20108] ? rcu_barrier+0x7e/0x600 [ 1368.001333][T20108] ip6gre_exit_batch_net+0x5a8/0x5f0 [ 1368.006673][T20108] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1368.012568][T20108] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 1368.018452][T20108] cleanup_net+0x62d/0xb00 [ 1368.022917][T20108] ? __cfi_cleanup_net+0x10/0x10 [ 1368.027936][T20108] process_one_work+0x71f/0xc40 [ 1368.032851][T20108] worker_thread+0xa29/0x11f0 [ 1368.037601][T20108] kthread+0x281/0x320 [ 1368.041710][T20108] ? __cfi_worker_thread+0x10/0x10 [ 1368.046896][T20108] ? __cfi_kthread+0x10/0x10 [ 1368.051565][T20108] ret_from_fork+0x1f/0x30 [ 1368.056040][T20108] [ 1368.059148][T20108] ---[ end trace 0000000000000000 ]--- [ 1368.136011][T15588] ------------[ cut here ]------------ [ 1368.141619][T15588] WARNING: CPU: 0 PID: 15588 at lib/ref_tracker.c:110 ref_tracker_free+0x5de/0x7c0 [ 1368.151138][T15588] Modules linked in: [ 1368.155078][T15588] CPU: 0 PID: 15588 Comm: kworker/0:4 Tainted: G W 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1368.166595][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1368.176766][T15588] Workqueue: events iterate_cleanup_work [ 1368.182480][T15588] RIP: 0010:ref_tracker_free+0x5de/0x7c0 [ 1368.188193][T15588] Code: 85 e8 2e 70 5b 02 43 0f b6 04 2c 84 c0 4c 8b 74 24 08 0f 85 c9 01 00 00 41 8b 3f e8 dc e8 ff ff 4c 89 f6 eb 84 e8 62 f1 e5 fe <0f> 0b 4d 85 ff 0f 85 d3 fa ff ff 4c 8b 24 24 4d 8d 74 24 0c 4c 89 [ 1368.207881][T15588] RSP: 0018:ffffc900025efb20 EFLAGS: 00010293 [ 1368.214001][T15588] RAX: ffffffff828a060e RBX: 1ffff920004bdf68 RCX: ffff88811f5f3cc0 [ 1368.222010][T15588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900025efbe0 [ 1368.230015][T15588] RBP: ffffc900025efc50 R08: dffffc0000000000 R09: ffffc900025efb60 [ 1368.238016][T15588] R10: fffff520004bdf7c R11: 1ffff920004bdf6c R12: ffff88810ed8e9a0 [ 1368.246013][T15588] R13: dffffc0000000000 R14: ffffc900025efb60 R15: ffff888117016ab8 [ 1368.254101][T15588] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1368.263122][T15588] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1368.269878][T15588] CR2: 0000200001000000 CR3: 00000001218ea000 CR4: 00000000003506b0 [ 1368.277995][T15588] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1368.286061][T15588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1368.294340][T15588] Call Trace: [ 1368.297758][T15588] [ 1368.300782][T15588] ? __cfi_ref_tracker_free+0x10/0x10 [ 1368.306250][T15588] ? __cfi_device_cmp+0x10/0x10 [ 1368.311248][T15588] ? __kasan_check_read+0x11/0x20 [ 1368.316357][T15588] ? nf_ct_iterate_cleanup_net+0xe8/0x130 [ 1368.322209][T15588] iterate_cleanup_work+0x105/0x1f0 [ 1368.327591][T15588] ? __cfi_iterate_cleanup_work+0x10/0x10 [ 1368.333392][T15588] ? __schedule+0xb8f/0x14e0 [ 1368.338131][T15588] process_one_work+0x71f/0xc40 [ 1368.343059][T15588] worker_thread+0xa29/0x11f0 [ 1368.347833][T15588] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 1368.353388][T15588] ? __kthread_parkme+0x142/0x180 [ 1368.358500][T15588] kthread+0x281/0x320 [ 1368.362628][T15588] ? __cfi_worker_thread+0x10/0x10 [ 1368.367827][T15588] ? __cfi_kthread+0x10/0x10 [ 1368.372529][T15588] ret_from_fork+0x1f/0x30 [ 1368.377081][T15588] [ 1368.380138][T15588] ---[ end trace 0000000000000000 ]--- [ 1368.410466][T21280] device macsec1 entered promiscuous mode [ 1368.416246][T21280] device vlan1 entered promiscuous mode [ 1368.423630][T21280] device vlan1 left promiscuous mode [ 1368.433061][T21291] device wg2 left promiscuous mode [ 1368.439870][T21294] device wg2 entered promiscuous mode [ 1368.498260][T21258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.512293][T21258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.522974][T21258] device bridge_slave_0 entered promiscuous mode [ 1368.530737][T21258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.538174][T21258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.545923][T21258] device bridge_slave_1 entered promiscuous mode [ 1368.609591][T21309] overlayfs: failed to clone upperpath [ 1369.096946][T21258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.104098][T21258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.111444][T21258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.118508][T21258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1369.358595][T20108] device veth0_vlan left promiscuous mode [ 1370.114184][T21323] 9pnet_fd: p9_fd_create_tcp (21323): problem connecting socket to 127.0.0.1 [ 1370.292238][T20538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.299755][T20538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.335022][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1370.349721][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1370.369035][T21335] device macsec1 entered promiscuous mode [ 1370.374941][T21335] device vlan1 entered promiscuous mode [ 1370.381941][T21335] device vlan1 left promiscuous mode [ 1370.390938][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1370.401456][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1370.410289][T20538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.417393][T20538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1370.425586][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1370.434466][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1370.443099][T20538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.450276][T20538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1370.477498][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1370.482042][T21337] overlayfs: failed to clone upperpath [ 1370.491432][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1370.507618][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1370.526048][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1370.559889][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1370.572042][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1370.596233][T21258] device veth0_vlan entered promiscuous mode [ 1370.609272][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1370.621726][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1370.700881][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1370.717362][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1370.725067][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1370.736319][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1370.746490][T21258] device veth1_macvtap entered promiscuous mode [ 1370.764742][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1370.773752][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1370.782711][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1370.817486][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1370.850651][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1370.985409][T21351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5986'. [ 1371.076056][T21355] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5988'. [ 1373.566522][T21374] overlayfs: failed to clone upperpath [ 1373.581715][T21375] device macsec1 entered promiscuous mode [ 1373.603035][T21375] device vlan1 entered promiscuous mode [ 1373.633980][T21375] device vlan1 left promiscuous mode [ 1373.749200][T21381] loop3: detected capacity change from 0 to 256 [ 1373.763940][T21381] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1373.839439][T21384] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1373.848877][T21384] FAT-fs (loop5): unable to read boot sector [ 1374.777769][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1374.777787][ T28] audit: type=1326 audit(1751888577.054:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21403 comm="syz.3.6002" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4449f8e929 code=0x0 [ 1375.564126][T21409] loop3: detected capacity change from 0 to 2048 [ 1375.647476][T21409] EXT4-fs error (device loop3): __ext4_fill_super:5389: inode #2: comm syz.3.6002: iget: bad extended attribute block 281474976710655 [ 1375.702097][T21409] EXT4-fs (loop3): get root inode failed [ 1375.722021][T21409] EXT4-fs (loop3): mount failed [ 1376.353390][T21421] overlayfs: failed to resolve './file1/file0': -2 [ 1376.777447][ T6140] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1376.979158][ T6140] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1377.009927][ T6140] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1377.129433][ T6140] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1377.243288][ T6140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1377.384502][ T6140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1377.533911][ T6140] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1377.767119][ T6140] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1377.795518][ T6140] usb 4-1: Product: syz [ 1377.812558][ T6140] usb 4-1: Manufacturer: syz [ 1377.841012][ T6140] cdc_wdm 4-1:1.0: skipping garbage [ 1377.846267][ T6140] cdc_wdm 4-1:1.0: skipping garbage [ 1377.958232][ T6140] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1378.060033][T21441] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1378.069527][T21441] FAT-fs (loop1): unable to read boot sector [ 1378.137190][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1379.978441][T15859] usb 4-1: USB disconnect, device number 15 [ 1387.189904][T20531] ================================================================== [ 1387.198039][T20531] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 1387.205789][T20531] Read of size 4 at addr ffff88810ed8e98c by task kworker/u4:134/20531 [ 1387.214058][T20531] [ 1387.216405][T20531] CPU: 1 PID: 20531 Comm: kworker/u4:134 Tainted: G W 6.1.141-syzkaller-00037-gfa7e0538663e #0 [ 1387.228142][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1387.238282][T20531] Workqueue: netns cleanup_net [ 1387.243095][T20531] Call Trace: [ 1387.246399][T20531] [ 1387.249355][T20531] __dump_stack+0x21/0x24 [ 1387.253818][T20531] dump_stack_lvl+0xee/0x150 [ 1387.258450][T20531] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1387.263516][T20531] ? __cfi__printk+0x8/0x8 [ 1387.267968][T20531] ? tcp_metrics_flush_all+0xd3/0x210 [ 1387.273383][T20531] ? tcp_metrics_flush_all+0xd3/0x210 [ 1387.278883][T20531] print_address_description+0x71/0x210 [ 1387.284475][T20531] print_report+0x4a/0x60 [ 1387.288850][T20531] kasan_report+0x122/0x150 [ 1387.293392][T20531] ? tcp_metrics_flush_all+0xd3/0x210 [ 1387.298796][T20531] kasan_check_range+0x280/0x290 [ 1387.303769][T20531] __kasan_check_read+0x11/0x20 [ 1387.308664][T20531] tcp_metrics_flush_all+0xd3/0x210 [ 1387.313895][T20531] ? __cfi_tcp_net_metrics_exit_batch+0x10/0x10 [ 1387.320165][T20531] tcp_net_metrics_exit_batch+0x10/0x20 [ 1387.325747][T20531] cleanup_net+0x62d/0xb00 [ 1387.330202][T20531] ? __cfi_cleanup_net+0x10/0x10 [ 1387.335178][T20531] process_one_work+0x71f/0xc40 [ 1387.340065][T20531] worker_thread+0xa29/0x11f0 [ 1387.344781][T20531] kthread+0x281/0x320 [ 1387.348876][T20531] ? __cfi_worker_thread+0x10/0x10 [ 1387.354020][T20531] ? __cfi_kthread+0x10/0x10 [ 1387.358646][T20531] ret_from_fork+0x1f/0x30 [ 1387.363097][T20531] [ 1387.366135][T20531] [ 1387.368475][T20531] Allocated by task 11823: [ 1387.372905][T20531] kasan_set_track+0x4b/0x70 [ 1387.377529][T20531] kasan_save_alloc_info+0x25/0x30 [ 1387.382672][T20531] __kasan_slab_alloc+0x72/0x80 [ 1387.387548][T20531] slab_post_alloc_hook+0x4f/0x2d0 [ 1387.392689][T20531] kmem_cache_alloc+0x16e/0x330 [ 1387.397572][T20531] copy_net_ns+0x145/0x5c0 [ 1387.402033][T20531] create_new_namespaces+0x3a2/0x660 [ 1387.407443][T20531] unshare_nsproxy_namespaces+0x120/0x170 [ 1387.413204][T20531] ksys_unshare+0x4ac/0x7b0 [ 1387.417748][T20531] __x64_sys_unshare+0x38/0x40 [ 1387.422547][T20531] x64_sys_call+0x767/0x9a0 [ 1387.427079][T20531] do_syscall_64+0x4c/0xa0 [ 1387.431528][T20531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1387.437452][T20531] [ 1387.439797][T20531] Freed by task 20108: [ 1387.443879][T20531] kasan_set_track+0x4b/0x70 [ 1387.448938][T20531] kasan_save_free_info+0x31/0x50 [ 1387.454006][T20531] ____kasan_slab_free+0x132/0x180 [ 1387.459146][T20531] __kasan_slab_free+0x11/0x20 [ 1387.463935][T20531] slab_free_freelist_hook+0xc2/0x190 [ 1387.469355][T20531] kmem_cache_free+0x12d/0x300 [ 1387.474160][T20531] cleanup_net+0xa58/0xb00 [ 1387.480357][T20531] process_one_work+0x71f/0xc40 [ 1387.485243][T20531] worker_thread+0xa29/0x11f0 [ 1387.489993][T20531] kthread+0x281/0x320 [ 1387.494088][T20531] ret_from_fork+0x1f/0x30 [ 1387.498534][T20531] [ 1387.500880][T20531] Last potentially related work creation: [ 1387.506608][T20531] kasan_save_stack+0x3a/0x60 [ 1387.511317][T20531] __kasan_record_aux_stack+0xb6/0xc0 [ 1387.516725][T20531] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1387.522584][T20531] insert_work+0x51/0x300 [ 1387.526948][T20531] __queue_work+0x9b1/0xd30 [ 1387.531489][T20531] delayed_work_timer_fn+0x61/0x80 [ 1387.536622][T20531] call_timer_fn+0x46/0x2a0 [ 1387.541128][T20531] __run_timers+0x667/0x9a0 [ 1387.545644][T20531] run_timer_softirq+0xb8/0xf0 [ 1387.550841][T20531] handle_softirqs+0x1d7/0x600 [ 1387.555606][T20531] __irq_exit_rcu+0x52/0xf0 [ 1387.560122][T20531] irq_exit_rcu+0x9/0x10 [ 1387.564364][T20531] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1387.570010][T20531] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1387.575991][T20531] [ 1387.578308][T20531] Second to last potentially related work creation: [ 1387.584898][T20531] kasan_save_stack+0x3a/0x60 [ 1387.589604][T20531] __kasan_record_aux_stack+0xb6/0xc0 [ 1387.594989][T20531] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1387.600811][T20531] insert_work+0x51/0x300 [ 1387.605147][T20531] __queue_work+0x9b1/0xd30 [ 1387.609658][T20531] delayed_work_timer_fn+0x61/0x80 [ 1387.614770][T20531] call_timer_fn+0x46/0x2a0 [ 1387.619271][T20531] __run_timers+0x667/0x9a0 [ 1387.623777][T20531] run_timer_softirq+0xb8/0xf0 [ 1387.628542][T20531] handle_softirqs+0x1d7/0x600 [ 1387.633305][T20531] __irq_exit_rcu+0x52/0xf0 [ 1387.637810][T20531] irq_exit_rcu+0x9/0x10 [ 1387.642063][T20531] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1387.647694][T20531] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1387.653690][T20531] [ 1387.656009][T20531] The buggy address belongs to the object at ffff88810ed8e900 [ 1387.656009][T20531] which belongs to the cache net_namespace of size 4224 [ 1387.670320][T20531] The buggy address is located 140 bytes inside of [ 1387.670320][T20531] 4224-byte region [ffff88810ed8e900, ffff88810ed8f980) [ 1387.683686][T20531] [ 1387.686010][T20531] The buggy address belongs to the physical page: [ 1387.692415][T20531] page:ffffea00043b6200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810ed8b480 pfn:0x10ed88 [ 1387.703971][T20531] head:ffffea00043b6200 order:3 compound_mapcount:0 compound_pincount:0 [ 1387.712308][T20531] flags: 0x4000000000010200(slab|head|zone=1) [ 1387.718401][T20531] raw: 4000000000010200 0000000000000000 dead000000000001 ffff8881002ad980 [ 1387.726986][T20531] raw: ffff88810ed8b480 0000000080070005 00000001ffffffff 0000000000000000 [ 1387.735567][T20531] page dumped because: kasan: bad access detected [ 1387.741988][T20531] page_owner tracks the page as allocated [ 1387.747716][T20531] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 284, tgid 284 (syz-executor), ts 27098122003, free_ts 27084028520 [ 1387.768917][T20531] post_alloc_hook+0x1f5/0x210 [ 1387.773689][T20531] prep_new_page+0x1c/0x110 [ 1387.778197][T20531] get_page_from_freelist+0x2c7b/0x2cf0 [ 1387.783744][T20531] __alloc_pages+0x19e/0x3a0 [ 1387.788359][T20531] alloc_slab_page+0x6e/0xf0 [ 1387.792959][T20531] new_slab+0x98/0x3d0 [ 1387.797055][T20531] ___slab_alloc+0x6f6/0xb50 [ 1387.801667][T20531] __slab_alloc+0x5e/0xa0 [ 1387.806058][T20531] kmem_cache_alloc+0x1b0/0x330 [ 1387.810916][T20531] copy_net_ns+0x145/0x5c0 [ 1387.815334][T20531] create_new_namespaces+0x3a2/0x660 [ 1387.820640][T20531] unshare_nsproxy_namespaces+0x120/0x170 [ 1387.826371][T20531] ksys_unshare+0x4ac/0x7b0 [ 1387.830883][T20531] __x64_sys_unshare+0x38/0x40 [ 1387.835680][T20531] x64_sys_call+0x767/0x9a0 [ 1387.840294][T20531] do_syscall_64+0x4c/0xa0 [ 1387.844710][T20531] page last free stack trace: [ 1387.849375][T20531] free_unref_page_prepare+0x742/0x750 [ 1387.854840][T20531] free_unref_page+0x8f/0x530 [ 1387.859529][T20531] __free_pages+0x67/0x100 [ 1387.863956][T20531] __free_slab+0xca/0x1a0 [ 1387.868298][T20531] __unfreeze_partials+0x160/0x190 [ 1387.873421][T20531] put_cpu_partial+0xa9/0x100 [ 1387.878114][T20531] __slab_free+0x1c4/0x280 [ 1387.882562][T20531] ___cache_free+0xbf/0xd0 [ 1387.887021][T20531] qlist_free_all+0xc6/0x140 [ 1387.891634][T20531] kasan_quarantine_reduce+0x14a/0x170 [ 1387.897110][T20531] __kasan_slab_alloc+0x24/0x80 [ 1387.901976][T20531] slab_post_alloc_hook+0x4f/0x2d0 [ 1387.907104][T20531] kmem_cache_alloc+0x16e/0x330 [ 1387.912005][T20531] vm_area_dup+0x65/0x280 [ 1387.916420][T20531] __split_vma+0x1b6/0x840 [ 1387.920863][T20531] do_mas_align_munmap+0x2f6/0x11b0 [ 1387.926079][T20531] [ 1387.928407][T20531] Memory state around the buggy address: [ 1387.934047][T20531] ffff88810ed8e880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1387.942120][T20531] ffff88810ed8e900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1387.950191][T20531] >ffff88810ed8e980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1387.958253][T20531] ^ [ 1387.962588][T20531] ffff88810ed8ea00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1387.970674][T20531] ffff88810ed8ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1387.978757][T20531] ================================================================== [ 1387.986975][T20531] Disabling lock debugging due to kernel taint