last executing test programs: 2.837784913s ago: executing program 4 (id=5): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r7) 2.198444553s ago: executing program 3 (id=4): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x21e, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000180)={0xffffffffffffffff, r4, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00'}, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@metacopy_on}], [], 0x2c}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file3\x00', 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000140)=0x20, 0x4) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x7) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=0x0], 0x50}}, 0x0) 2.075885604s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000009c0)=ANY=[@ANYBLOB='8\b\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000000c0002800400038004000400"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "77746a310400", "07f217bd2e511e465bbbd5de32b495b2fd044677d4d58834066baf840000be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/117, 0x75}, 0x4de}], 0x1, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000140)=0x30, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000200000000000000000000030000000003000000030000000000000000000000000000010500000010000000000000000000000a02"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000000080046000028000000000011907800000000030000004404c6f690780200"/54], 0x0) sendto$inet6(r3, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18bce104ccd322dbfb380a7f0cba009500584f2edc48c930da0b1e7c268646ade020c8e457a281ada245f0adcd1dfac7b64154caffc0252c5de2"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f00000bc7c0)={0x0, 0x0, "2fb2e549f0d4e415abdf33472233bb6bcdfd06b6366136fb9575267a6d255264406c3ce2c35ba3bf0de7b6608473b8c706f9511f4eebd2bfb4bfd879cb56f385f8ae5a01866f079c402fc11494d0491875cc0211f7e81dccdff6064e81aa5a4579736a9ca147fc54bd4a64bf759930d7df94d949c608258ae058b4c89be87be0223534c0021cc648619565211c75dc2be689c506ae85fe0d84050000006caa97be9bb62507bad7f54c35fc9318bd3443f71a656e2f83b4e1f0fd45c2d79d81557078e4b7c2c1e083b05996c2bc7b2fb3a0495e9c81cff818f385d6376164000000000500", "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"}) r8 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ca80)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {0x0, r6}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {r10, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r7}], 0x23, "6de363564627fe"}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a0000000250000000000000085000000080000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x6e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) 1.954150966s ago: executing program 1 (id=2): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delchain={0x26c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x21c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x204, 0x6, [@m_ife={0x184, 0x0, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x10d, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @private, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @dev}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x26c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "341aa889"}, @global=@item_4={0x3, 0x1, 0x0, "32e80001"}, @global=@item_4={0x3, 0x1, 0x0, "2ddcc2ab"}]}}, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.939869497s ago: executing program 4 (id=6): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000340)={[&(0x7f0000000100)='kfr\xbd\x8a\xf3m\x1ae1\x00', &(0x7f0000000100), &(0x7f0000000440)='\xe6\x8a\xae\x10\x87\xf5\x18U\xce\x04\xbd&\x91\xa3\xee\x9d\xfc\xf1\x93}\xc7\xc4\xdc\xe8u\f \x8c\xcc\x81X\x12{C(\r\xd8\x1cQXsd\x05\x14Y\x7f]\x97\xe0\xb9\x9f\x8a\xf7\x1c\xed\xba\xbd\\\x1b\x1fJ\x8b\x0e\xb3\x95\xf1~\xfc\x1cm=s+\x8d\xaa\f\x95\x82r\x01\xc3 3\xb2\xa1F 4q\xd4Q\xb2Y\x12\xa1\x0e\xf5\x96\xcf$', 0xffffffffffffffff], 0xe0ffffff7f0000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000001c0), &(0x7f0000000300)=r4}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e408"], 0xfdef) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x8, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main=@item_012={0x2, 0x0, 0x0, '\x00\x00'}]}}, 0x0}, 0x0) 1.303678717s ago: executing program 2 (id=7): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d6d6163677265656b2c636f6465706167653d313235352c636f6465706167653d3835322c73686f72746e616d653d6d697865642c747a3d5554432c636865636b3d7374726963742c726f6469722c757466383d312c7569643d21ea5e1bb7c40461dad2e62053d6f430fa8de4b1df5d51", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0xfd, 0x289, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000001740)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r4 = fsopen(0x0, 0x0) unshare(0x20000400) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r4) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@local, @remote, @local}, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "d533ccaefc16ad8e87b05a22d77099bbcfc2bb"}) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, "1d69387974cdb282"}) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r8 = dup(r7) write$UHID_DESTROY(r8, &(0x7f00000002c0), 0x4) 1.186356708s ago: executing program 3 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x1a0) sendfile(r2, r2, 0x0, 0x800000009) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000080)=0x34) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000053c0)={0x44, &(0x7f00000051c0)=ANY=[@ANYBLOB=' \v7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) 1.033338813s ago: executing program 0 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f00000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r1, @ANYBLOB="050036"], 0x40}, 0x4, 0x700000000000000}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x76, r7}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r11 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r11, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000001740)=""/4075, 0xfeb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 502.808153ms ago: executing program 2 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r7) 481.403915ms ago: executing program 2 (id=11): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003ac0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='\\', 0x1}], 0x1}}], 0x2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x65) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) sendmsg$netlink(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 359.499997ms ago: executing program 2 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x10) 330.927169ms ago: executing program 2 (id=13): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, 0x0) r1 = eventfd(0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000380)={0x0, r1}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x792, &(0x7f0000001a40)="$eJzs3ctrXFUYAPDvTl5NWk0EQesqINhA6cTU2Cq4qLgQwUJB17ZhMg01k0zJTEoTAraI4EZQcSHopmsfdefWx1b/CxdSKZoWKy4kciczybSZSSdpZiaQ3w9O5pz7yDnfnPs4d+5lJoADazT9k4k4GhEfJxHD1elJRPRVcr0RZ9aXu7e6kktTEmtrb/2ZVJa5u7qSi7p1Uoerhacj4qcPIo5nttZbWlqenSoU8gvV8nh57vJ4aWn5xKW5qZn8TH7+1MTk5MnTL54+tXex/v3r8pE/Pnn92Ldn/n3/qZsf/ZzEmThSnVcfx14ZjdHqe9KXvoX3eW2vK+uypNsNYFfSXbNnfS+PozEcPZVcE4Ob2YnljjQPAGiD9yJiDQA4YBLnfwA4YGqfA9xdXcnVUnc/keis269GxKH1+Gv3N9fn9Fbv2R2q3Acdupvcd2ckiYiRPah/NCK+/P6dr9MU1X5wLw3ohGvXI+LCyOjW43+y5ZmFnXp+u5lrA5WX0QcmH7TzD3TTD+n456VG47/MxvgnGox/Bhrsu7vx8P0/c2sPqmkqHf+9Uvds2726+KtGeqqlxypjvr7k4qVCPj22PR4RY9E3kJYnKos2HrmN3fnvTrP668d/f3367ldp/enr5hKZW70D968zPVWeetS4a25fj3imt1H8yUb/J03Gv+darOONlz/8otm8NP403lraGn97rd2IeK5h/2/2ZbLt84njlc1hvLZRNPDdb58PNat/9Fj/Rv+nKa2/di3QCWn/D20f/0hS/7xmaed1/HJj+Mdm8+q3/8bxN97++5O3K/n+6rSrU+XywkREf/Lm1uknN9etlWvLp/GPPdt4/1+vtvH2n14TXmgx/t7e+Gb38bdXGv/0jvp/55mb92Z7mtXfWv9PVnJj1SmtHP9abeCjvHcAAAAAAAAAAAAAAAAAAAAAAAAA0KpMRByJJJPdyGcy2ez6b3g/GUOZQrFUPn6xuDg/HZXfyh6Jvkztqy6H674PdaL6ffi18skHyi9ExBMR8dnAYKWczRUL090OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqDjf5/f/U7wPdbh0A0DaHut0AAKDjnP8B4ODZ2fl/sG3tAAA6x/U/ABw8LZ//L7S3HQBA57j+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM3OnT2bprV/VldyaXn6ytLibPHKiel8aTY7t5jL5ooLl7MzxeJMIZ/NFeea/qNr6y+FYvHyZMwvXh0v50vl8dLS8vm54uJ8+fyluamZ/Pl8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDWlZaWZ6cKhfyCzLaZwf3RjH2T6Y190QyZh2QyEbG71euPEoPdO0ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7HP/BwAA///F9Cf0") r3 = open(&(0x7f00000006c0)='./file1\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x10, 0x8, 0x7, 0xf8, 0x4100, r3, 0x5, '\x00', 0x0, r3, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='ext4_fc_cleanup\x00', r6, 0x0, 0x4000000000}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x3026c25, &(0x7f0000000840)={[], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=14): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200080000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x0, 0x15000000}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 22.152255][ T30] audit: type=1400 audit(1730648290.866:66): avc: denied { integrity } for pid=280 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 22.176000][ T30] audit: type=1400 audit(1730648290.886:67): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.177333][ T280] cgroup: Unknown subsys name 'net' [ 22.198586][ T30] audit: type=1400 audit(1730648290.886:68): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.225598][ T30] audit: type=1400 audit(1730648290.926:69): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.225827][ T280] cgroup: Unknown subsys name 'devices' [ 22.462804][ T280] cgroup: Unknown subsys name 'hugetlb' [ 22.468220][ T280] cgroup: Unknown subsys name 'rlimit' [ 22.661162][ T30] audit: type=1400 audit(1730648291.376:70): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.684905][ T30] audit: type=1400 audit(1730648291.376:71): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.709898][ T30] audit: type=1400 audit(1730648291.376:72): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.717652][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.742463][ T30] audit: type=1400 audit(1730648291.466:73): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.768233][ T30] audit: type=1400 audit(1730648291.466:74): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.798092][ T30] audit: type=1400 audit(1730648291.516:75): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.823550][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.306864][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.313766][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.321356][ T291] device bridge_slave_0 entered promiscuous mode [ 24.329740][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.336798][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.344051][ T291] device bridge_slave_1 entered promiscuous mode [ 24.397371][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.404276][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.411661][ T292] device bridge_slave_0 entered promiscuous mode [ 24.438574][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.445468][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.452764][ T292] device bridge_slave_1 entered promiscuous mode [ 24.554027][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.561015][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.568213][ T294] device bridge_slave_0 entered promiscuous mode [ 24.590178][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.597071][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.604392][ T294] device bridge_slave_1 entered promiscuous mode [ 24.652267][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.659210][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.666590][ T295] device bridge_slave_0 entered promiscuous mode [ 24.677008][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.684148][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.691418][ T293] device bridge_slave_0 entered promiscuous mode [ 24.698061][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.705060][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.712355][ T295] device bridge_slave_1 entered promiscuous mode [ 24.724518][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.731480][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.738635][ T293] device bridge_slave_1 entered promiscuous mode [ 24.767526][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.775183][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.782286][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.789057][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.815855][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.822725][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.829809][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836621][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.934157][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.941308][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.948230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.956451][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.963679][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.991514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.001123][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.009505][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.016813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.024831][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.031683][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.051640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.059660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.067515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.074953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.082415][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.090473][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.097366][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.104668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.112761][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.119593][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.156460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.176331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.184317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.191855][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.199113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.207218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.230927][ T292] device veth0_vlan entered promiscuous mode [ 25.237804][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.245508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.253797][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.260700][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.268581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.277980][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.286226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.294726][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.301592][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.318187][ T291] device veth0_vlan entered promiscuous mode [ 25.331747][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.339184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.346702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.355478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.363969][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.372294][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.380242][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.387091][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.394357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.402697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.410886][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.417731][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.424966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.432857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.440617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.447908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.455340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.462912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.470188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.488463][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.496916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.505220][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.512098][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.519393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.527834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.535901][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.542952][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.550124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.558292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.570047][ T292] device veth1_macvtap entered promiscuous mode [ 25.581661][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.589214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.597393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.605699][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.616360][ T291] device veth1_macvtap entered promiscuous mode [ 25.623005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.631327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.639331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.647467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.655554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.663408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.671401][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.696306][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.704390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.712470][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.720321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.728414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.736662][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.744909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.753019][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.761330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.769339][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.777666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.785882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.794267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.802523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.822800][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.833089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.847864][ T293] device veth0_vlan entered promiscuous mode [ 25.862566][ T295] device veth0_vlan entered promiscuous mode [ 25.869057][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.878149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.885562][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.893291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.901422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.909702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.918530][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.926402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.934903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.942367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.959318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.977890][ T293] device veth1_macvtap entered promiscuous mode [ 25.985865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.994161][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.007827][ T294] device veth0_vlan entered promiscuous mode [ 26.018165][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.026439][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.035074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.101623][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.145654][ T295] device veth1_macvtap entered promiscuous mode [ 26.157269][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.166709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.175345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.357661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.397538][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.517838][ T294] device veth1_macvtap entered promiscuous mode [ 26.523416][ T330] loop3: detected capacity change from 0 to 16 [ 26.525101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.540408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.549301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.557532][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.565791][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.574070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.583189][ T330] erofs: (device loop3): mounted with root inode @ nid 36. [ 26.631599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.648421][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.657223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.665783][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.705032][ T334] loop0: detected capacity change from 0 to 4096 [ 26.784502][ T334] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 27.201048][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 27.201160][ T30] audit: type=1400 audit(1730648295.766:116): avc: denied { create } for pid=329 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.253430][ T335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 27.288123][ T30] audit: type=1400 audit(1730648295.996:117): avc: denied { write } for pid=333 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.324594][ T30] audit: type=1400 audit(1730648296.016:118): avc: denied { add_name } for pid=333 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.344800][ T30] audit: type=1400 audit(1730648296.016:119): avc: denied { create } for pid=333 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.357764][ T349] loop2: detected capacity change from 0 to 256 [ 27.365998][ T30] audit: type=1400 audit(1730648296.016:120): avc: denied { read write open } for pid=333 comm="syz.0.1" path="/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.375864][ T349] FAT-fs (loop2): Unrecognized mount option "uid=!^a S0]Q00000000000000000000" or missing value [ 27.405522][ T60] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.412242][ T30] audit: type=1400 audit(1730648296.026:121): avc: denied { map } for pid=333 comm="syz.0.1" path="/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.413891][ T332] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.434998][ T30] audit: type=1400 audit(1730648296.026:122): avc: denied { execute } for pid=333 comm="syz.0.1" path="/0/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.464684][ T335] syz.3.4 (335) used greatest stack depth: 20992 bytes left [ 27.473468][ T30] audit: type=1400 audit(1730648296.056:123): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.502333][ T30] audit: type=1400 audit(1730648296.216:124): avc: denied { name_bind } for pid=333 comm="syz.0.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 27.523690][ T30] audit: type=1400 audit(1730648296.216:125): avc: denied { create } for pid=333 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 27.602803][ T349] serio: Serial port ptm0 [ 27.607448][ T353] loop3: detected capacity change from 0 to 1024 [ 27.672233][ T353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 27.688098][ T353] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 27.703164][ T353] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 27.718277][ T353] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.718277][ T353] [ 27.728181][ T353] EXT4-fs (loop3): Total free blocks count 0 [ 27.734512][ T353] EXT4-fs (loop3): Free/Dirty block details [ 27.740587][ T353] EXT4-fs (loop3): free_blocks=68451041280 [ 27.741085][ T359] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 27.746493][ T353] EXT4-fs (loop3): dirty_blocks=96 [ 27.763792][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 27.770433][ T353] EXT4-fs (loop3): Block reservation details [ 27.776534][ T353] EXT4-fs (loop3): i_reserved_data_blocks=6 [ 27.782978][ T359] EXT4-fs (loop3): This should not happen!! Data will be lost [ 27.782978][ T359] [ 27.880821][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.891615][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.902230][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.911827][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.921395][ T332] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 27.930251][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.938114][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.950738][ T60] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 27.959519][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.968788][ T332] usb 5-1: config 0 descriptor?? [ 27.974006][ T60] usb 2-1: config 0 descriptor?? [ 28.090732][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.111371][ T299] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.346708][ T368] 9pnet: Insufficient options for proto=fd [ 28.355374][ T368] 9pnet: Insufficient options for proto=fd [ 28.384595][ T370] Zero length message leads to an empty skb [ 28.400499][ T370] loop2: detected capacity change from 0 to 2048 [ 28.430723][ T299] usb 4-1: Using ep0 maxpacket: 32 [ 28.436158][ T341] process 'syz.4.6' launched './file1' with NULL argv: empty string added [ 28.452389][ T60] uclogic 0003:5543:0064.0001: item fetching failed at offset 10/11 [ 28.474915][ T60] uclogic 0003:5543:0064.0001: parse failed [ 28.482609][ T370] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 28.491038][ T60] uclogic: probe of 0003:5543:0064.0001 failed with error -22 [ 28.493416][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.530805][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.531807][ T332] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 28.540394][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 28.540423][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.564662][ T42] usb 1-1: config 0 descriptor?? [ 28.578466][ T332] arvo 0003:1E7D:30D4.0002: item fetching failed at offset 5/7 [ 28.596622][ T332] arvo 0003:1E7D:30D4.0002: parse failed [ 28.610739][ T332] arvo: probe of 0003:1E7D:30D4.0002 failed with error -22 [ 28.644940][ T371] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.664407][ T370] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 28.666410][ T331] usb 2-1: USB disconnect, device number 2 [ 28.674679][ T370] SELinux: security_context_str_to_sid(staff_u) failed for (dev loop2, type ext4) errno=-22 [ 28.698042][ T291] EXT4-fs error (device loop2): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 10016 (inode size 256) [ 28.711858][ T291] EXT4-fs error (device loop2): ext4_lookup:1856: inode #14: comm syz-executor: iget: bad extra_isize 10016 (inode size 256) [ 28.751505][ T299] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 28.760503][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.768760][ T299] usb 4-1: Product: syz [ 28.772968][ T299] usb 4-1: Manufacturer: syz [ 28.773284][ T45] ------------[ cut here ]------------ [ 28.777522][ T299] usb 4-1: SerialNumber: syz [ 28.785308][ T45] kernel BUG at fs/ext4/inode.c:2746! [ 28.791583][ T299] usb 4-1: config 0 descriptor?? [ 28.798241][ T332] usb 5-1: USB disconnect, device number 2 [ 28.799540][ T45] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 28.809776][ T45] CPU: 1 PID: 45 Comm: kworker/u4:2 Not tainted 5.15.167-syzkaller-android13-5.15.167_r00 #0 [ 28.819754][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 28.829654][ T45] Workqueue: writeback wb_workfn (flush-7:2) [ 28.835472][ T45] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [ 28.841016][ T45] Code: 89 de e8 0d 6f 87 ff 45 84 f6 75 2c e8 73 6c 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 6c 87 ff <0f> 0b e8 53 6c 87 ff e8 aa 9c 17 ff eb 9b e8 47 6c 87 ff e8 9e 9c [ 28.860460][ T45] RSP: 0018:ffffc900002ef000 EFLAGS: 00010293 [ 28.866361][ T45] RAX: ffffffff81e8eb26 RBX: 0000008000000000 RCX: ffff8881085f93c0 [ 28.874177][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 28.881982][ T45] RBP: ffffc900002ef410 R08: ffffffff81e8e296 R09: ffffed102132900b [ 28.889794][ T45] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900002ef7d0 [ 28.897608][ T45] R13: 0000000000000000 R14: 0000008410000000 R15: 0000000000000001 [ 28.905416][ T45] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 28.914182][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 28.920780][ T45] CR2: 0000000000000000 CR3: 000000010d8f0000 CR4: 00000000003506a0 [ 28.928703][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 28.936520][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 28.944333][ T45] Call Trace: [ 28.947445][ T45] [ 28.950278][ T45] ? __die_body+0x62/0xb0 [ 28.954745][ T45] ? die+0x88/0xb0 [ 28.958419][ T45] ? do_trap+0x103/0x330 [ 28.962491][ T45] ? ext4_writepages+0x3fe6/0x4000 [ 28.967435][ T45] ? handle_invalid_op+0x95/0xc0 [ 28.972206][ T45] ? ext4_writepages+0x3fe6/0x4000 [ 28.977155][ T45] ? exc_invalid_op+0x32/0x50 [ 28.981666][ T45] ? asm_exc_invalid_op+0x1b/0x20 [ 28.986524][ T45] ? ext4_writepages+0x3756/0x4000 [ 28.991470][ T45] ? ext4_writepages+0x3fe6/0x4000 [ 28.996422][ T45] ? ext4_writepages+0x3fe6/0x4000 [ 29.001484][ T45] ? update_blocked_averages+0x10d0/0x10d0 [ 29.007203][ T45] ? ext4_readpage+0x230/0x230 [ 29.011977][ T45] ? xas_start+0x32c/0x3f0 [ 29.016231][ T45] ? xas_load+0x2b7/0x2d0 [ 29.020484][ T45] ? __kasan_check_write+0x14/0x20 [ 29.025460][ T45] ? ext4_readpage+0x230/0x230 [ 29.030114][ T45] do_writepages+0x40e/0x670 [ 29.034741][ T45] ? __writepage+0x130/0x130 [ 29.039145][ T45] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 29.044612][ T45] ? __kasan_check_write+0x14/0x20 [ 29.049555][ T45] ? _raw_spin_lock+0xa4/0x1b0 [ 29.054157][ T45] __writeback_single_inode+0xdf/0xa70 [ 29.059450][ T45] writeback_sb_inodes+0xb2a/0x1920 [ 29.064485][ T45] ? _raw_spin_lock+0xa4/0x1b0 [ 29.069087][ T45] ? queue_io+0x520/0x520 [ 29.073268][ T45] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 29.078547][ T45] ? queue_io+0x3d0/0x520 [ 29.082741][ T45] wb_writeback+0x3b9/0x9e0 [ 29.087060][ T45] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 29.093217][ T45] ? set_worker_desc+0x158/0x1c0 [ 29.098018][ T45] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 29.103456][ T45] ? __kasan_check_write+0x14/0x20 [ 29.108411][ T45] wb_workfn+0x3d9/0x1110 [ 29.112574][ T45] ? inode_wait_for_writeback+0x280/0x280 [ 29.118158][ T45] ? sched_clock+0x9/0x10 [ 29.122291][ T45] ? _raw_spin_unlock+0x4d/0x70 [ 29.126976][ T45] ? finish_task_switch+0x167/0x7b0 [ 29.132016][ T45] ? __kasan_check_read+0x11/0x20 [ 29.136872][ T45] ? read_word_at_a_time+0x12/0x20 [ 29.141819][ T45] ? strscpy+0x9c/0x260 [ 29.145811][ T45] process_one_work+0x6bb/0xc10 [ 29.150507][ T45] worker_thread+0xad5/0x12a0 [ 29.155018][ T45] kthread+0x421/0x510 [ 29.158923][ T45] ? worker_clr_flags+0x180/0x180 [ 29.163775][ T45] ? kthread_blkcg+0xd0/0xd0 [ 29.168202][ T45] ret_from_fork+0x1f/0x30 [ 29.172458][ T45] [ 29.175325][ T45] Modules linked in: [ 29.182892][ T45] ---[ end trace 2dc3b15ebd627b24 ]--- [ 29.188198][ T45] RIP: 0010:ext4_writepages+0x3fe6/0x4000 [ 29.193974][ T45] Code: 89 de e8 0d 6f 87 ff 45 84 f6 75 2c e8 73 6c 87 ff 49 be 00 00 00 00 00 fc ff df 4c 8b 64 24 50 e9 e4 c5 ff ff e8 5a 6c 87 ff <0f> 0b e8 53 6c 87 ff e8 aa 9c 17 ff eb 9b e8 47 6c 87 ff e8 9e 9c [ 29.213831][ T45] RSP: 0018:ffffc900002ef000 EFLAGS: 00010293 [ 29.219997][ T45] RAX: ffffffff81e8eb26 RBX: 0000008000000000 RCX: ffff8881085f93c0 [ 29.227989][ T45] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 29.235947][ T45] RBP: ffffc900002ef410 R08: ffffffff81e8e296 R09: ffffed102132900b [ 29.243841][ T45] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900002ef7d0 [ 29.251638][ T45] R13: 0000000000000000 R14: 0000008410000000 R15: 0000000000000001 [ 29.259474][ T45] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 29.268376][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 29.274875][ T45] CR2: 0000000000000000 CR3: 0000000123c1f000 CR4: 00000000003506b0 [ 29.285384][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 29.293291][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 29.301049][ T45] Kernel panic - not syncing: Fatal exception [ 29.307079][ T45] Kernel Offset: disabled [ 29.311210][ T45] Rebooting in 86400 seconds..