last executing test programs: 1.647656871s ago: executing program 1 (id=2): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2814000, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7fff}}, {@noblock_validity}, {@nouid32}, {@norecovery}, {@quota}, {@data_err_ignore}, {@jqfmt_vfsold}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800}}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x141442, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xd84ab055191115fc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x14, &(0x7f00000002c0)=[{&(0x7f00000003c0)=' ', 0x100120}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f00000006c0)) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) sendmmsg$unix(r3, &(0x7f0000000400), 0x400000000000041, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x4}, 0x38) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x9ef) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_emit_ethernet(0x42, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x1, 0x8, 0x34, 0x66, 0x0, 0x5, 0x1, 0x0, @multicast2, @broadcast, {[@cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}, @generic={0x88, 0x2}]}}, @timestamp_reply={0xe, 0x0, 0x0, 0x7, 0x3, 0x9, 0xa, 0x3a0f}}}}}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000480)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000580), 0x2804000, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) connect$unix(r6, &(0x7f0000000600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket(0x6, 0x4, 0x7) 1.393491677s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000004002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095", @ANYRES8], &(0x7f0000000c40)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000001340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800490000380000000000059078ac141400ac1414bb440c0523640101000000000900070200000400000200000000000000e14049e22b17ee881ae0bab76fb5f5e0fa7f8b0319703a505cf2ce50f660df59c8f872b22b23cdb38c7f8bb8b126aaba0f0a0832c8d78a9d184a68448d32ad10526da529384805af1c8ce6c59a351fe06f4da032b9228826d7d7b493a09432ae1c2f41f329147a70f20e7181471025db4bb988ccd43e24c26ae61454a5428910735d8ec03caf2e1115a00b911c1b16c8650d281b0b842746c3099508739a77b237a37655bbac896f82f4f0589fbaa63340a1c591bb81c8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c40000090780000"], 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000c00)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000dc0)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000e80), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000012c0), 0x4) r3 = memfd_create(&(0x7f00000017c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r4 = getuid() r5 = getegid() ioctl$FIOCLEX(r3, 0x5451) fchown(r3, r4, r5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdc000/0x18000)=nil, 0x0, 0x0, 0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001a80)='ext4\x00', &(0x7f0000001ac0)='./file0\x00', 0x2000200, &(0x7f0000001b00), 0x7, 0x504, &(0x7f0000001b40)="$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") r6 = open(&(0x7f0000002080)='./bus\x00', 0x44040, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000020c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000002100)={0x1, 0x0, 0x8, 0xfffffffffffffffe}) finit_module(r6, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c80)={r0}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000010000000000000000f0ffffff00000000622bfaa0ecc8280e4b744ddcdc19c7918c04bb2f421ddf99f3b5337ca5db568e608acaf5bd168ad057f76552966178f32c346e5435b9a144f93a66fa175f03c39b5978c631a49b99116a7b24bdb98e646c7544ea66c3c3c4081a851e218e9700707ab21f4756f648b189295d444c1829ca63ed996fb4f52cb0a59c20a781ab71cf23870142e1ed173fdb00afb11b6997763599e07d89be", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20842, 0x0) bind$inet(r8, &(0x7f0000001040)={0x2, 0x4e20, @local}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000001080)={'veth1_vlan\x00', {0x2, 0x440, @empty}}) socket$nl_generic(0x10, 0x3, 0x10) 1.385340238s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"}) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000bc0)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000c40)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x89}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYRES8=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c80)=0x14) sendmsg$nl_route(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newlink={0x3c, 0x10, 0x437, 0x1000000, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r4, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1003, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r9, 0x0, 0x0}, 0x10) syz_usb_connect$midi(0x0, 0x59, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201100300000040351201824000010203010902470001011898040904000002010300060905050b20000fd7020f25010b3d1813da062a56c3efd1de09058c0220006df78014110110050028afbcba74bcb07a35bd80fa15672fd4a92f101ab6fc6b0d13c78455f29a76cb3d9ddac62b6be9f7000622f9c9d020cf96c0955e976bbdcd5d1f3e0cda991b9aa6eb6bec91cc3d546c59ff646ca4383302bfaa6286c99ecf46550740e3605efccf539bdce33f89d4ba68cf0227304b3aaa49171bb0d23560d8ac0aca448afb3def727d6532ec42e8bc3a55642a165eafe74a1be7da51bd69f989cca71a32ee7388620254"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1555555555555857, [{0x92, &(0x7f0000000700)=@lang_id={0x0, 0x3, 0x40d}}]}) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000e40)={'TPROXY\x00'}, &(0x7f0000000e80)=0x1e) syz_usb_connect(0x0, 0xb3, &(0x7f00000001c0)=ANY=[], 0x0) openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000340)='./dm0\x00', 0x0, 0x0) 1.300559117s ago: executing program 1 (id=6): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x99}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchdir(r0) 1.293883147s ago: executing program 3 (id=4): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000000040), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="b50b46d154a1c11f57142faed18abf5ca2cbeccbc332ed3c8f9f8fd3c0c315a46ba26cb71ef1d49366", 0x29) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffffc, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0xfffffffc, 0x1}, 0x10) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f0000000440)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f0000000440)=""/4096, 0x2d, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f0000001440)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/11, @ANYRESHEX, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, 0x0) (async) io_setup(0x4, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000001500)={'bond_slave_0\x00', @random="013301300108"}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000001500)={'bond_slave_0\x00', @random="013301300108"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000001540), r6) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0x14, r7, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000001640), r6) 1.254894311s ago: executing program 2 (id=3): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000480)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x29, 0x3, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair(0x8, 0x80000, 0x7, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x100}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000640)={{r3}, "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"}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2000, 0x68, 0x28}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x2, 0x45f, 0xa, 0x20080, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) syz_clone(0x8000771f, 0x0, 0x0, 0x0, 0x0, 0x0) 1.135950793s ago: executing program 2 (id=7): r0 = fsopen(&(0x7f0000000340)='securityfs\x00', 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$vsock(r2, 0x28, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x10) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x3) setxattr$system_posix_acl(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000002000000000000000400000000000000100000000000000020"], 0x24, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000380)=0x8, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd) getsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f00000003c0)=""/17, &(0x7f0000000400)=0x11) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) accept4$vsock_stream(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x0) mlockall(0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup2(r5, r5) accept$unix(r6, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x400, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17b87}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 954.566682ms ago: executing program 1 (id=8): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000000)={r0, 0x0, 0xfff, 0xffffffff, 0x7}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x8004, &(0x7f00000007c0)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000000800)="$eJzs3c9rG1ceAPDvyHb8I961F5bdzc2wkDWEyOusN9mFPWTpoRQaCLTnJkZWTGrZCpYcYmPahFLopdCWHgLtJef+SG+99gf01P4JvfVQEtLWCU3pobiMNLIdW3L8W2n9+cBY782M/N5X7+nNk2YYBXBoDaV/chHHIuKNJGIgW59ERFct1Rlxtr7fw6XFnogoJLG8/Nz3SW2fB0uLhVjznNTRznrmbxHx2asRJ3Iby63ML0yNl0rF2Sw/Up2+MlKZXzh5eXp8sjhZnDk9OjZ26sy/z5xuWfWXtxvrj18t9N998+l/fHj251f+evv1z5M4G/3ZtrVx7JWhGMpek670JXzEU3tdWJsl7a4AO5K+NTvq7/I4FgPRUUu10HuQNQMA9ks6iV4GAA6ZxPEfAA6ZxvcAD5YWC42lvd9IHKx7/4+Innr8D7OlvqUzO2fXUzsP2vcgeeTMSBIRg3tQ/lBEvPvxC8c7snxaD+fSgINw/UZEXBwc2jj+734U+udmG5e7m64+bMcfaKdP0vnPf5rN/3Ir859oMv/prs9d/rLb8ofW5Te+/3N3dlvGZtL53//q17atm/+tXLQ22JHl/lCb83Ully6XiunY9seIGI6u7jQ/Wtu1+Zg5fP+X+63Kz+Z/76fLD2+9+F5afvq4ukfuTue6oXJivNr5xW4Dz9y7EX1Zcl38yUr7Jy3mv+e3WMYz/33tnVbb0vjTeBvLxvj31/KtiONN23+1LZNNr08cqXWHkUanaOKjb272tSp/bfunS1p++rhut5t7E+1G925ErQMkyeprUN+yEv9gsvZ6zcr2y/jy1sCnrbY9Pv6m/X/8SPJ8LX0kW3dtvFqdHY04kjy7cf2p1ec28o390/iH/978/V8vtnn/Tz8TXtxi/J13v/tg5/HvrzT+ic37/7r278lWr655XOL2w6mOVuVvrf3HaqnhbE3a/o+Layv12llvBgAAAAAAAAAAAAAAAAAAAAAAAIDty73UG/2R5PLZPU77I5fL5yOORsSfoy9XKleqJy6V52YmovZb2YPRlWvc6nJgzf1QR7P74Tfyp9bl/xURf4qIt7t7a/l8oVyaaHfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJA5WvvN/42//5/6trvdtQMA9k1PuysAABw4x38AOHy2d/zv3bd6AAAHx+d/ADh8tnz8v7i/9QAADo7P/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyz8+fOpcvyT0uLhTQ/cXV+bqp89eREsTKVn54r5Avl2Sv5yXJ5slTMF8rTLf/R9fpDqVy+MhYzc9dGqsVKdaQyv3Bhujw3U71weXp8snih2HVgkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1lXmF6bGS6Xi7O8icX01sD3+z71tjatvp0/viYhdlN7bclNnPAHN/YQnumNLO3+91311bxJrR4neNoxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8NvwYAAP//7V8WgQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000680)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) flistxattr(r1, 0x0, 0xdeff) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='sysfs\x00', 0x820800, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='offl', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x101042, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000640)={{}, 0x7fd, 0x8000000000000000, 0x8000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x101000, 0x0) ioctl$int_in(r3, 0x40086610, &(0x7f0000000240)=0x40000) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000300)={0x8, 0xffffffffffffffff, 0x3, 0x7ffb, 0xfffbffff, 0x2}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000001100)=0x62001411) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@nobuffered_iomap}, {@prjquota}, {@nogrpid}, {@discard}, {@norecovery}]}, 0x3, 0x589, &(0x7f0000001900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001700)='./bus\x00', &(0x7f0000001740), 0x8, &(0x7f0000001780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000017c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000001800)='.\x00', 0x0, 0x0) 885.104349ms ago: executing program 4 (id=9): r0 = syz_clone(0x25900100, &(0x7f0000000140)="20304e15b17ffeeb8099ba7bd361eea8f547c8eb00a53cbcb31c06781e9f334a3ad4b003949fd938ebaa5ae29626234bea673277e86717453a335d37d5625c7d3612b3c32f826fe9a57ce369c6fe087c215a3473459313d12ec88d", 0x5b, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ff586719fb6c798f810ce86a4632381bcb1687dc6ff9f2e038b78b2360f21648502c6df8b15c4fa354f2c6323743b8b9d2c1a62bb099845f794d81bd985ebc46558ce9aa993042421ae253e0d519ab2b4b896eb3ca7fe05a") setpriority(0x3, r0, 0x8200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x2, 0x1, 0x7, 0x1, 0xffffffffffffffff}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f00000000c0)={0x80, 0x7}) (async, rerun: 32) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001505000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 799.026348ms ago: executing program 4 (id=10): recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/56, 0x38}, {&(0x7f0000000800)=""/101, 0x65}], 0x2, &(0x7f00000008c0)=""/15, 0xf}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1c917, &(0x7f00000000c0)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nodiscard}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = open(&(0x7f0000000680)='.\x00', 0x8000, 0x50) setuid(0xee01) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000006c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000940)='ext4\x00', &(0x7f0000000980)='./file3\x00', 0x4010, &(0x7f00000009c0), 0x2, 0xbd8, &(0x7f0000000a00)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") lsetxattr$system_posix_acl(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='system.posix_acl_default\x00', &(0x7f0000001680)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001000000000020"], 0x24, 0x3) llistxattr(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)=""/4096, 0x1000) socketpair(0x27, 0x5, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000002700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="090000008100000003000000ffffffff16"], 0x50) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 575.803001ms ago: executing program 1 (id=11): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000003c0)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f0000000700)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x300000000000000, &(0x7f00000012c0)=@base={0x1c, 0x4, 0x49, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000480)=""/74, 0xa000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000500)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000540)={'wg2\x00', 0x0}) bind$xdp(r4, &(0x7f0000000580)={0x2c, 0xa, r5}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xfffffffa}}, @restrict={0x2, 0x0, 0x0, 0xb, 0x3}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000013c0)=""/175, 0x4c, 0xaf, 0x0, 0xe, 0x10000}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x7}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x69}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x18, 0x740d, 0x7fff, 0x80000001, 0x100, r2, 0xc, '\x00', r5, r6, 0x5, 0x4, 0x3}, 0x50) syz_emit_ethernet(0xd2, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x9c, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "23e9c9deda338979d8aafa218a85ed0c5cdf78391bc64d12a442bcdca77342a7", "cb0b84a64d44a90afd90d33713c8792e3156421571fe4de6e519b8991b03f90d2bec50f39198a18c9bd00c5228583fff", "205ef49af51093c7134f946c11d7837f0f4287d5d382a32604dbffe6", {"56e8cb6783b1a334408278736e8139d2", "e4be21420396daec7200"}}}}}}}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) getuid() close(r0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x6, 0x5, 0x3, 0x2, [0x101, 0x1, 0x7ff, 0xe555, 0x400]}) 409.877898ms ago: executing program 3 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x200000b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000206073000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff000000000000000004000000000000000600080000000000ffff0000800000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000ca3d0000000000002abd7000043500000a0001002000000000000000480003006465666c617465000100008000"/235], 0x134}, 0x1, 0x0, 0x0, 0x8801}, 0x0) lsetxattr$security_selinux(&(0x7f0000000340)='.\x00', &(0x7f0000000380), &(0x7f00000003c0)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) 364.086663ms ago: executing program 1 (id=13): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x7cb002, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) syz_read_part_table(0x5fd, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000d40)='./bus\x00', 0x130) mount(&(0x7f0000000d80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000dc0)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000e00)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000e40)=0x0) io_submit(r2, 0x20000000000000d6, &(0x7f0000000e80)=[&(0x7f0000000ec0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000f00), 0x4000, 0xa00}]) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/test\x00', 0x2) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='100', 0x3) r5 = open(&(0x7f0000000380)='.\x00', 0xe8922fb2007cac76, 0x190) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffff", @ANYRES16=r6, @ANYBLOB="00002bbd7000fbdbdf25010000000000000008410000004c00188000000173797a3000"/86], 0x68}, 0x1, 0x0, 0x0, 0x402c080}, 0x800) mkdirat(r5, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test\x00', 0x777) bind$bt_hci(r3, &(0x7f0000000680)={0x1f, 0xffff, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x7, &(0x7f0000000140)=[{0x70, 0xa7, 0x6, 0x7}, {0xac24, 0xfa, 0x4, 0x5fc}, {0x6, 0x68, 0x68, 0x8}, {0x400, 0x7f, 0x8, 0x9}, {0x3, 0x4, 0x3, 0x4}, {0xba, 0x54, 0xd, 0x7ff}, {0x2, 0x7, 0xb, 0x2}]}, 0x10) 0s ago: executing program 2 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES16, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x318, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, 0x0, 0x3000209, 0x0, 0x1, 0x0, 0x0) chdir(0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x85) syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 21.860411][ T30] audit: type=1400 audit(1794657566.758:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.861494][ T277] cgroup: Unknown subsys name 'net' [ 21.883083][ T30] audit: type=1400 audit(1794657566.758:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.910619][ T30] audit: type=1400 audit(1794657566.788:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.910785][ T277] cgroup: Unknown subsys name 'devices' [ 22.054628][ T277] cgroup: Unknown subsys name 'hugetlb' [ 22.060256][ T277] cgroup: Unknown subsys name 'rlimit' [ 22.166809][ T30] audit: type=1400 audit(1794657567.068:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.189980][ T30] audit: type=1400 audit(1794657567.068:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.201339][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.214913][ T30] audit: type=1400 audit(1794657567.068:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.232578][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.246335][ T30] audit: type=1400 audit(1794657567.128:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.280420][ T30] audit: type=1400 audit(1794657567.128:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.306031][ T30] audit: type=1400 audit(1794657567.128:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.331550][ T30] audit: type=1400 audit(1794657567.128:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.236656][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.243788][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.251223][ T286] device bridge_slave_0 entered promiscuous mode [ 23.259059][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.266217][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273602][ T286] device bridge_slave_1 entered promiscuous mode [ 23.358188][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.365254][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.372509][ T289] device bridge_slave_0 entered promiscuous mode [ 23.379409][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.386563][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.393900][ T289] device bridge_slave_1 entered promiscuous mode [ 23.410110][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.417187][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.424501][ T287] device bridge_slave_0 entered promiscuous mode [ 23.431220][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.438302][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.445731][ T287] device bridge_slave_1 entered promiscuous mode [ 23.483245][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.490293][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.497861][ T285] device bridge_slave_0 entered promiscuous mode [ 23.507549][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.514918][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.522311][ T285] device bridge_slave_1 entered promiscuous mode [ 23.571436][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.578619][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.586036][ T288] device bridge_slave_0 entered promiscuous mode [ 23.599755][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.606897][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.614362][ T288] device bridge_slave_1 entered promiscuous mode [ 23.722993][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.730063][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.737379][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.744407][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.758709][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.765766][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.773140][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780154][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.800856][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807916][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.815186][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.822198][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.833312][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.840702][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.848024][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.855449][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.862590][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.869796][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.877510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.885147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.916215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.924502][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.932615][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.939655][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.947903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.956378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.964800][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.971827][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.979219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.987297][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.003119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.010736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.037950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.046007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.055103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.062995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.070523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.078236][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.086572][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.093714][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.101070][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.109293][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.116311][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.123768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.131681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.140364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.148549][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.155576][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.186574][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.195078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.202836][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.212460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.220999][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.228038][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.236007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.244315][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.251759][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.259223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.267533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.275689][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.282695][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.290072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.298665][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.305713][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.313182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.321268][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.328289][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.335731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.343773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.351689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.361126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.369493][ T286] device veth0_vlan entered promiscuous mode [ 24.381784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.390219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.402720][ T289] device veth0_vlan entered promiscuous mode [ 24.414817][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.422966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.431220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.440008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.448188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.456159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.464160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.472390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.480806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.488421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.496374][ T286] device veth1_macvtap entered promiscuous mode [ 24.505921][ T287] device veth0_vlan entered promiscuous mode [ 24.514548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.522263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.530240][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.538846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.546571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.559383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.567903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.576214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.584643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.593358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.601619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.610145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.618661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.631145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.639418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.650095][ T289] device veth1_macvtap entered promiscuous mode [ 24.660089][ T287] device veth1_macvtap entered promiscuous mode [ 24.669454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.677177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.684956][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.692766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.700976][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.708566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.717847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.726095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.735046][ T285] device veth0_vlan entered promiscuous mode [ 24.747864][ T285] device veth1_macvtap entered promiscuous mode [ 24.756131][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 24.770874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.779638][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.787957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.796370][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.804663][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.812196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.820460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.828784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.837127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.845444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.853886][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.866954][ T288] device veth0_vlan entered promiscuous mode [ 24.878354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.887067][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.895661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.899992][ T308] loop1: detected capacity change from 0 to 33792 [ 24.904610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.918660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.926985][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.935863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.944561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.953831][ T308] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_dir_size_kb=0x0000000000007fff,noblock_validity,nouid32,norecovery,quota,data_err=ignore,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000800,,errors=continue. Quota mode: writeback. [ 24.979462][ T308] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 24.999170][ T308] EXT4-fs error (device loop1): ext4_map_blocks:742: inode #15: comm syz.1.2: lblock 0 mapped to illegal pblock 0 (length 6) [ 25.012458][ T308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 25.025558][ T308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 25.025558][ T308] [ 25.029394][ T288] device veth1_macvtap entered promiscuous mode [ 25.042882][ T308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 112: padding at end of block bitmap is not set [ 25.057913][ T308] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28 [ 25.057936][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.058191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.070289][ T308] EXT4-fs (loop1): This should not happen!! Data will be lost [ 25.070289][ T308] [ 25.070304][ T308] EXT4-fs (loop1): Total free blocks count 0 [ 25.079057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.093301][ T308] EXT4-fs (loop1): Free/Dirty block details [ 25.115488][ T308] EXT4-fs (loop1): free_blocks=0 [ 25.120456][ T308] EXT4-fs (loop1): dirty_blocks=48 [ 25.125657][ T308] EXT4-fs (loop1): Block reservation details [ 25.134255][ T308] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 25.143281][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.161859][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.162120][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.191321][ T308] syz.1.2 (308) used greatest stack depth: 22056 bytes left [ 25.199542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.208210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.413967][ T336] : renamed from bond_slave_0 [ 25.526749][ T338] Zero length message leads to an empty skb [ 25.643063][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.646774][ T340] loop1: detected capacity change from 0 to 34816 [ 25.712692][ T347] loop4: detected capacity change from 0 to 33280 [ 25.757081][ T340] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 25.786006][ T340] EXT4-fs error (device loop1): __ext4_new_inode:1084: comm syz.1.8: reserved inode found cleared - inode=18 [ 25.803249][ T340] EXT4-fs (loop1): Remounting filesystem read-only [ 25.815016][ T347] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 25.829823][ T340] EXT4-fs error (device loop1): ext4_lookup:1852: inode #2: comm syz.1.8: bad inode number: 15 [ 25.840748][ T340] EXT4-fs (loop1): Remounting filesystem read-only [ 25.852327][ T347] EXT4-fs (loop4): orphan cleanup on readonly fs [ 25.860759][ T347] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.10: Allocating blocks 41-42 which overlap fs metadata [ 25.890477][ T347] EXT4-fs error (device loop4): ext4_acquire_dquot:6227: comm syz.4.10: Failed to acquire dquot type 0 [ 25.910296][ T347] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 25.941070][ T347] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #12: comm syz.4.10: corrupted inode contents [ 25.954158][ T347] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #12: comm syz.4.10: mark_inode_dirty error [ 25.965815][ T347] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #12: comm syz.4.10: corrupted inode contents [ 25.980009][ T353] loop1: detected capacity change from 0 to 36864 [ 25.989690][ T347] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.10: mark_inode_dirty error [ 26.011835][ T353] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 26.034112][ T353] EXT4-fs (loop1): Test dummy encryption mode enabled [ 26.050525][ T347] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #12: comm syz.4.10: corrupted inode contents [ 26.066734][ T353] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 26.101229][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.120364][ T347] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 26.143260][ T347] EXT4-fs error (device loop4): ext4_do_update_inode:5260: inode #12: comm syz.4.10: corrupted inode contents [ 26.158946][ T347] EXT4-fs error (device loop4): ext4_truncate:4317: inode #12: comm syz.4.10: mark_inode_dirty error [ 26.170524][ T347] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 26.226425][ T347] EXT4-fs (loop4): 1 truncate cleaned up [ 26.232797][ T347] EXT4-fs (loop4): pa ffff88811199b150: logic 1, phys. 41, len 23 [ 26.240690][ T347] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23 [ 26.270896][ T359] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 26.416027][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 32 [ 26.448493][ T361] loop1: detected capacity change from 0 to 2048 [ 26.455383][ T347] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,abort,barrier=0x0000000000000000,nodiscard,resgid=0x0000000000000000,noinit_itable,nombcache,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 26.479403][ T6] usb 1-1: string descriptor 0 read error: -22 [ 26.485888][ T6] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 26.500958][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.530313][ T347] ================================================================== [ 26.538391][ T347] BUG: KASAN: use-after-free in mutex_lock+0x8e/0x1c0 [ 26.545158][ T347] Write of size 8 at addr ffff88812b734550 by task syz.4.10/347 [ 26.552766][ T347] [ 26.555085][ T347] CPU: 0 PID: 347 Comm: syz.4.10 Not tainted syzkaller #0 [ 26.562174][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 26.572222][ T347] Call Trace: [ 26.575485][ T347] [ 26.578397][ T347] __dump_stack+0x21/0x30 [ 26.582714][ T347] dump_stack_lvl+0x110/0x170 [ 26.587514][ T347] ? show_regs_print_info+0x20/0x20 [ 26.592709][ T347] ? load_image+0x3f0/0x3f0 [ 26.597204][ T347] print_address_description+0x7f/0x2c0 [ 26.602747][ T347] ? mutex_lock+0x8e/0x1c0 [ 26.607153][ T347] kasan_report+0x10f/0x150 [ 26.611643][ T347] ? mutex_lock+0x8e/0x1c0 [ 26.616043][ T347] kasan_check_range+0x249/0x2a0 [ 26.620967][ T347] __kasan_check_write+0x14/0x20 [ 26.625891][ T347] mutex_lock+0x8e/0x1c0 [ 26.630125][ T347] ? wait_for_completion_killable_timeout+0x10/0x10 [ 26.636696][ T347] ? l2tp_session_put+0xaf/0x1a0 [ 26.641616][ T347] ? l2tp_session_delete+0x3a9/0x4a0 [ 26.646884][ T347] pppol2tp_release+0x178/0x2b0 [ 26.651719][ T347] sock_close+0xb8/0x200 [ 26.655942][ T347] ? sock_mmap+0xa0/0xa0 [ 26.660165][ T347] __fput+0x22b/0x900 [ 26.664132][ T347] ____fput+0x15/0x20 [ 26.668093][ T347] task_work_run+0x127/0x190 [ 26.672665][ T347] do_exit+0xb70/0x29a0 [ 26.676805][ T347] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 26.682427][ T347] ? put_task_struct+0x90/0x90 [ 26.687177][ T347] ? __kasan_check_write+0x14/0x20 [ 26.692272][ T347] ? _raw_spin_lock_irq+0x95/0xf0 [ 26.697283][ T347] do_group_exit+0x149/0x310 [ 26.701858][ T347] ? __kasan_check_write+0x14/0x20 [ 26.706949][ T347] ? recalc_sigpending+0x1ac/0x230 [ 26.712043][ T347] get_signal+0x64f/0x1430 [ 26.716444][ T347] arch_do_signal_or_restart+0xe2/0x1100 [ 26.722059][ T347] ? selinux_file_ioctl+0x1e1/0x4c0 [ 26.727243][ T347] ? get_sigframe_size+0x10/0x10 [ 26.732168][ T347] ? __se_sys_futex+0x135/0x330 [ 26.737027][ T347] exit_to_user_mode_loop+0xa7/0xe0 [ 26.742206][ T347] exit_to_user_mode_prepare+0x87/0xd0 [ 26.747652][ T347] syscall_exit_to_user_mode+0x1a/0x30 [ 26.753197][ T347] do_syscall_64+0x58/0xa0 [ 26.757599][ T347] ? clear_bhb_loop+0x50/0xa0 [ 26.762259][ T347] ? clear_bhb_loop+0x50/0xa0 [ 26.766919][ T347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.772833][ T347] RIP: 0033:0x7f4593c604d9 [ 26.777230][ T347] Code: Unable to access opcode bytes at RIP 0x7f4593c604af. [ 26.784578][ T347] RSP: 002b:00007f45926ae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.792977][ T347] RAX: fffffffffffffe00 RBX: 00007f4593edcfa8 RCX: 00007f4593c604d9 [ 26.800940][ T347] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4593edcfa8 [ 26.808890][ T347] RBP: 00007f4593edcfa0 R08: 0000000000000000 R09: 0000000000000000 [ 26.816844][ T347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.824801][ T347] R13: 00007f4593edd038 R14: 00007fffac221b80 R15: 00007fffac221c68 [ 26.832757][ T347] [ 26.835757][ T347] [ 26.838059][ T347] Allocated by task 347: [ 26.842277][ T347] __kasan_kmalloc+0xd4/0x100 [ 26.846941][ T347] __kmalloc+0x13d/0x2c0 [ 26.851167][ T347] l2tp_session_create+0x39/0xb60 [ 26.856172][ T347] pppol2tp_connect+0xbf5/0x1640 [ 26.861088][ T347] __sys_connect+0x3cb/0x450 [ 26.865657][ T347] __x64_sys_connect+0x7a/0x90 [ 26.870402][ T347] x64_sys_call+0x7c/0x9a0 [ 26.874802][ T347] do_syscall_64+0x4c/0xa0 [ 26.879202][ T347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.885080][ T347] [ 26.887392][ T347] Freed by task 347: [ 26.891262][ T347] kasan_set_track+0x4a/0x70 [ 26.895834][ T347] kasan_set_free_info+0x23/0x40 [ 26.900751][ T347] ____kasan_slab_free+0x125/0x160 [ 26.905844][ T347] __kasan_slab_free+0x11/0x20 [ 26.910592][ T347] slab_free_freelist_hook+0xc2/0x190 [ 26.915942][ T347] kfree+0xc4/0x270 [ 26.919729][ T347] l2tp_session_put+0xaf/0x1a0 [ 26.924478][ T347] l2tp_session_delete+0x3a9/0x4a0 [ 26.929580][ T347] pppol2tp_release+0x169/0x2b0 [ 26.934412][ T347] sock_close+0xb8/0x200 [ 26.938640][ T347] __fput+0x22b/0x900 [ 26.942606][ T347] ____fput+0x15/0x20 [ 26.946574][ T347] task_work_run+0x127/0x190 [ 26.951147][ T347] do_exit+0xb70/0x29a0 [ 26.955283][ T347] do_group_exit+0x149/0x310 [ 26.959854][ T347] get_signal+0x64f/0x1430 [ 26.964251][ T347] arch_do_signal_or_restart+0xe2/0x1100 [ 26.969865][ T347] exit_to_user_mode_loop+0xa7/0xe0 [ 26.975043][ T347] exit_to_user_mode_prepare+0x87/0xd0 [ 26.980478][ T347] syscall_exit_to_user_mode+0x1a/0x30 [ 26.985918][ T347] do_syscall_64+0x58/0xa0 [ 26.990315][ T347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 26.996187][ T347] [ 26.998490][ T347] The buggy address belongs to the object at ffff88812b734400 [ 26.998490][ T347] which belongs to the cache kmalloc-512 of size 512 [ 27.012529][ T347] The buggy address is located 336 bytes inside of [ 27.012529][ T347] 512-byte region [ffff88812b734400, ffff88812b734600) [ 27.025794][ T347] The buggy address belongs to the page: [ 27.031427][ T347] page:ffffea0004adcd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12b734 [ 27.041647][ T347] head:ffffea0004adcd00 order:2 compound_mapcount:0 compound_pincount:0 [ 27.049949][ T347] flags: 0x4000000000010200(slab|head|zone=1) [ 27.056034][ T347] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 27.064596][ T347] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 27.073156][ T347] page dumped because: kasan: bad access detected [ 27.079549][ T347] page_owner tracks the page as allocated [ 27.085243][ T347] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 347, ts 26510522612, free_ts 0 [ 27.104754][ T347] post_alloc_hook+0x192/0x1b0 [ 27.109506][ T347] prep_new_page+0x1c/0x110 [ 27.113987][ T347] get_page_from_freelist+0x2d42/0x2dd0 [ 27.119510][ T347] __alloc_pages+0x1a2/0x460 [ 27.124083][ T347] new_slab+0xa0/0x4d0 [ 27.128128][ T347] ___slab_alloc+0x3ac/0x840 [ 27.132698][ T347] __slab_alloc+0x49/0x90 [ 27.137005][ T347] __kmalloc+0x16a/0x2c0 [ 27.141231][ T347] l2tp_session_create+0x39/0xb60 [ 27.146233][ T347] pppol2tp_connect+0xbf5/0x1640 [ 27.151151][ T347] __sys_connect+0x3cb/0x450 [ 27.155721][ T347] __x64_sys_connect+0x7a/0x90 [ 27.160465][ T347] x64_sys_call+0x7c/0x9a0 [ 27.164858][ T347] do_syscall_64+0x4c/0xa0 [ 27.169254][ T347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.175131][ T347] page_owner free stack trace missing [ 27.180480][ T347] [ 27.182783][ T347] Memory state around the buggy address: [ 27.188390][ T347] ffff88812b734400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.196448][ T347] ffff88812b734480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.204484][ T347] >ffff88812b734500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.212525][ T347] ^ [ 27.219174][ T347] ffff88812b734580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 27.227213][ T347] ffff88812b734600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 27.235249][ T347] ================================================================== [ 27.243285][ T347] Disabling lock debugging due to kernel taint [ 27.250372][ T323] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 27.274137][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 27.274151][ T30] audit: type=1400 audit(1794657572.158:165): avc: denied { mounton } for pid=360 comm="syz.1.13" path="/4/bus" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.302316][ T30] audit: type=1400 audit(1794657572.168:166): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.328318][ T30] audit: type=1400 audit(1794657572.168:167): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.349774][ T30] audit: type=1400 audit(1794657572.168:168): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.350506][ T6] usb 1-1: MIDIStreaming interface descriptor not found [ 27.371435][ T30] audit: type=1400 audit(1794657572.168:169): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.398606][ T30] audit: type=1400 audit(1794657572.168:170): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.419192][ T30] audit: type=1400 audit(1794657572.168:171): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.442231][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.442730][ T30] audit: type=1400 audit(1794657572.168:172): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.472475][ T30] audit: type=1400 audit(1794657572.228:173): avc: denied { bind } for pid=360 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.492030][ T30] audit: type=1400 audit(1794657572.228:174): avc: denied { setopt } for pid=360 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.574546][ T320] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.581932][ T320] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.593813][ T6] usb 1-1: USB disconnect, device number 2 [ 27.693090][ T306] usb 3-1: Using ep0 maxpacket: 16 [ 27.833164][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.844411][ T306] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.854280][ T306] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 27.867225][ T306] usb 3-1: config 0 interface 0 has no altsetting 0 [ 27.873854][ T306] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 27.882870][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.891858][ T306] usb 3-1: config 0 descriptor?? [ 28.344194][ T363] loop2: detected capacity change from 0 to 128 [ 28.383435][ T363] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ÿ" or missing value [ 28.516325][ T306] hid (null): unknown global tag 0xd [ 28.521638][ T306] hid (null): unknown global tag 0xe [ 28.527174][ T306] hid (null): unknown global tag 0xe [ 28.532446][ T306] hid (null): unknown global tag 0xd [ 28.537853][ T306] hid (null): unknown global tag 0xe [ 28.543179][ T306] hid (null): unknown global tag 0xd [ 28.715476][ T6] usb 3-1: USB disconnect, device number 2