last executing test programs: 13.231735696s ago: executing program 1 (id=139): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x20004004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 13.108804205s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 11.928066241s ago: executing program 1 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRES16], 0x1, 0x1534, &(0x7f0000002d00)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 9.168085025s ago: executing program 1 (id=154): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000851a84c88c18d01a3b7f21f90ffb3737b02522d7397fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x86a305) r3 = socket$netlink(0x10, 0x3, 0x8000000004) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r4, 0x1d, 0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000200ffffffff", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x39, 0x85, &(0x7f00000001c0)="e88b81032ea7acc90784647fbde2dffe4bbedb68d288addbf06268952b9879b3ead942733850db6f9291d21181b8f510f34c1ed65c59c3ee15", &(0x7f0000000380)=""/133, 0x8, 0x0, 0x1c, 0x1000, &(0x7f0000000280)="97e278a2dc901777cc16b6ba2e53dd901a41162229eb5a390212c7ba", &(0x7f0000000a00)="1d8cf87543b87c0926edf9be79d73ec3ad43fb700b9f2e03632294c8a2ed4a249d503bdce3058febb7fbe8543f42e615660a5f31b04d65e8e444f5a73d34ac26573e2266f122a3c30e56bf9e5754084cc2587f0daba974440c4a4f481480dac8b074865bde64cbf74e1b70cba950fd85ee36fffe209ee59f74411fdd446e07d82fcd9359a8318b5a82ff03e752cbf1ebf3a63b643a2280623252e4b31810455282ad54f157bdd14b2ce9dba7ac8b163e50d52711551864eecbdadf89448785f624c39b88e0b9363d1ea4f37bff76b0fe3d6dcb0d38591eca2bd456753d1b3fc59991870e3a3544299f0df93ea4ecf97d25b6f90b103ec97b9fe3ab155de6ddf0c21fea2b190519ac62f854197ee8e8bfe5e8d9d611ff62320d1e3039716942ae0b4cf39b431084585299d19e4215c0a29a93977df1960182ac418801429904cea4caf96013cdf01cf34604eb2dbcc1e663444f95d4d10d6d9805e097d54e0b381dfed45043f5429e7b2608293787410ef1ede8af336e3acf3a7f778b71e676d37a492f7417cd5e3187aa6e97c584637bf6b88758fe652032a07ffca760cd9e4bd5537f6bdd7026085833d471407952b7e29b7dbcb05ea5739e72c34d370b42bd0cdcce3e5f0fcdfc9088467a168890d79f704c5c16e25dee303d35f32f73f2b2516ae0620be97beecd973302e4664180a07d7c0572b5809998ac7f84788c777a80545da5d517c32efa5dc68a13a8a5b95894a797070a6781418e90cecd69c22a321d38b446a49034438fd6254a65b5608567a5b78a58b8d0ddff55335a9426dc397c0b395982ae784fc2f7422f957695e8e5e01b89ff28291f050ebf48fbdadf725cb9934d50da335a91c45a6e1312b97b186edfef71f9a5c00fefab1781acdf5f2dc9cbb5c35af1ca23d4b6cd57fbdddeda7adfc27cb642767d51accc71aababa191f787aa2292e88601e54fc691960a455612a1551b43353a77be8f21a42032c68f75b207b55f48e0e3d6d9e359131f30bdbeedd44af423eb0668be81d60c0a433caf48ea13ddfed332588be215ee6588ccf1a848b4bae40b24a4b132ab9c42df56fd4c34300ad8273532b108fcbc84fa865b3be39068f08dae70b12999fc97df41d88513d478626350a8f447d67ff97fe2a700e656ebb089a0414408a2b4ff10d76e0eccf8258ded73ef91f53114c9333881c7722fd4e5cfbd754290d8638b4d311f921a3ac8a22741f8da830babfc74b33cb92af82e8528acb36c3b0c11e066fb4b1f074ca4c3f92ae31c0d7234772f6aabb62b64607325324164fd2259fa7d73a8eadb299a9897a687f688e580eff09aef34a8810c23469f7f3a307a1375e79a5a42057f02f5a5cd1b370332933f015182bca5a4b9073069aae5315080b7a2280f2bc3c7636ecac472b104c9957792b8bc95aaed4dd5feada85555c6c3439d8f8ac8bab94a4e114248bc565e29b60abb11f3268b69e2046c18b37534cd7a51ee6c4c28c3697174f54fd93a3703f3ac950336aae2c77c45b2939023730b96a7860365a89533c533c9ce97a820acccc6e12e8956d681a045d5cb68597ce92a0f1d85d343b51f8ac2285ebfdcfc7dfcd5c6b18038824ed19b242ecf66a5beddd0000797023e4c67728af159b79104785ab273e0aa844a84b94c508c6e7b45dc47e30043d112f96ca2a9554acc6670e8588f3c38ed5dcb8af973ab07a426dca6ab99dfc4325bb6a53f8c46607b5c11d4fcd59951619fdb13f4907e8351d128960bae1ceee254c16b347bc67064ff2e7e5f501426f727eecb43d58149dbb07537098a4066b83dc5d3e7e3ed6ee6fbd118a9a030dfd3fdee84c5dfd16a607680e045707d29b885c45ad5eb360c0c8843fe3800dc40971ce74477edb3d1bf464157204beded4a88e19aae9e3e75a611d89453992e5c2a63793ef9e87af14334638c13b42d62b951beb8e58896c46515f1e3a05a497973bca59d2932d98859c9844d3eae5bc564a0f4b232341866a5d6af3eb08710ededfdeed607c3cf09fc7c90254fc8b130d8c012380898ee45cd73447904c9aa7273b5f8b91a27fbf6132ff1ce1968114663a60fe2dce25e2e1350235169d8530acc60d0df51e2e8816c9d3c88c037e4909e0653c43ed7ac8c0596485800b764385352d7f6ad85d0c3a2cef9abe1f83aef5081b08661dbcc1a2f5ca075d1f8bef8e7b4511c73672e1de90a61b8a303f2365ed6f38441d116e4ad03b59231d82d12de618d04b470d0775c9d4fe626472c9007fa8ba218fa9ec89b44bdd40fecd188ca985ee04846f3944c79557613ee61d90574a19a813294d15f6cfa6e3725b753ee2343b3250e3c1bf9229053c21ca6723cdd2e2a82791c13cf6dbd20e241d506b82c2d3a74c5c44be9a16d56b4c3fcb97311b3229fd65b772aa93967067e4218176a70580dc40137c2a6ad43969aacee378330cad178e7c8e2911cd794dae859d8b2879b16fba1b4d3c22df351617f653908d8436a534ca0227105973b44289f24e88b1d108f540af74b62803b00fb355b4cbf7a9ff2c0ad3a13b7422b2e21284d1c1caa0a1cd36040fc034c1fa1bcf144ae699098b9c7997a0adf5e8e3c5553d629eae824c06468b5d599b1404eb71f779fdcc1708af135668b0b9f464a6e23b7f6b5cf87aa347a79107bc75e505399c6907c46d425b5da801d81ff2644be35d6e3f9676a62acf557e05d4fdea45f6fe9b27e199e6b0a48a43d20c8549e5d3d8f1421a608364acb5a00b4ed7cc03f2f8fa9b6cbc8b34b7a5dc235c0ffd310172cfc50bd0b0ad7aebb9e254d2b33d10b79c61365d0a488665dc48a5dade00410aadd106a0dbaf1319276de5b75e0a04d0acd64b9cf3f62479b72f0ee8a725f5d5327ded007395d491cb296555ffc85016f371093a5fed5118e3bc47759e5836eeb43f5c9a28bf8e3cd2be1d0aa3c6494ce4d0ee99c583af6c0644d7d2462bc7962258dbb83814b3426a683af9672cce35a39fe29cfd14c69fefe2daa78a4870a624f867a47514e94045026fd978129bea5787d279b43b453c719865db00d494b5e27acefadf2439ee4f1c634f3188b1d1cda784b4871474a090d829f180bc72dd176b7329a6ed256d5e423470f812e65281ab63a9096fed60017d4c4ca4e5909c7ee99ff12cc4787e3b33859af51bc158bce86d1efafec270ba5fc6c72d297cf3ebd7938640cc08188ee184c6a545240fdc8f7a2d319cec0af5fa7c0ad5af758692807d98f837b4be8f8d9a5b2773bd27f164a6eb662b087f24619acc392149c6bdf8f2e57b73697c83b8f5b11f6c3bae22c1ed7428a54db74e9f376ab92964d4745d815d53e0d1eb8fe67aede93c7e5823a68f81ed0216da53c4dcee3cf01e1dbe5471ea913ec43b5617e68ab63e9d25711ca267d07fe78b7bba2421bc8a966dac22287347eb3f55fda65960f7d0e9de9b7c845a9759bbda9c4505461586c6136f7c29d0bace9fd2fa2cec2eddf1b3ecdbe3837bd8ba448d1d18379817da4e65bedea3dd4c50177e68bdf23252de82faa34256e24c8a6d79575b25e9e6d8793098535f1448ca5341768f5db10c2428181acd717936e4564cea9b67cdac781e1552f6effd91de528c1543d1480dc7a77022ff3d08ccb0dd90e2ec9c988c29e58cedfc355798e016c16279334d0a4ad8e628f355fd2e01d846c42892d3b26177e8802861c8243cbf752534579674bef911abc0f974537859891b9dcf2113df12b1d511a70316c193e104b819dcb78d06118ec78ed0d8e356a7f89e8c84e3ec2c5264ceb6cb265fbcba4a98c5c8e805d67a3d9bbbedf7f657469ad478a08bbf660b377734bc6e4b9c2642d63e6d73e4bc69b3511826e5816d8eb5d4d377764e98d8e44288f890c2fa8a908df1afabb3c5a6ed90575819928d8917cd99f307e6936474713d36078678bc96baab567297a947d71c07e728bd6ae4199f80de6d7f013f848ef617675c52b58f1f0c5fe092cb9fc0b6a0f96d7f3f54096290762e9d642659c2f069cd452e18c3678791b44e81a1755b1a2f555b51d12128406177873dc3bebc7a96c9361a672749ef3819d6715478fa5693651046b46fa13e2c45ea458c912958f2ac0837e916b6f9f695d00703157bfc0d2e1f40b8439e8553fd0054c40a81ad0a44425fda60ed50acf11f9b4f145243df7074160a5a82037ef14dda4ad7bff90fcec8e2e62d15c262dd0a178ab2c6f821bf8425efea1fc57b5d92017bbd243caa64a9bdc4a69c5f89b514730af486aa5978784e7644b4afad39422072c815049f4359e78a2f702d91c3f0c52fe1f9ccd58fc26114019c01c0dd38ab19c300edc2b5c790641006cd5dcf216bdc23070acfd2abea70cdc6b8233a2ff88a7d6494ec4985fea711fb94e354b0970769b0a53df33abf8674e9516e6a2e7e1af5d46f63f9a99cc7607eda4d859f9f58902f36b07b1f8305028e169bb037ecc44a67f8e771b89c5cf840e94cf4ed5b678bcf3225a28a9919d6b34f85207a5cf4ff4bd394ed45e1a23177ec8f9ed5e67cb8607edb0b1d882302f3c1030e68071b78751b671b2fea3b3eb118773ceb5e850bd1344d882852fe84fd36d541efbbed9b59ca0fe353662aa704fb7c0864a390434cf5158dbb51b56333204276e267d8d9ab51d1b83432980f097c98b310bc5e0d8403fb969ba0815fa810b9512afcfca615b63a202be9a3eb400974a499a15e6bdc26d24422564639e47d44ab68fa4f1fac009a92cd367afdbf7663d600d5e51ad5bcad7fd70e1575abee9bc9e7150c79a7e6acc46bf656411f40c40514755536fcbb9721638db666e05c48cc86df23e787479e0dced512240eeef72e7cd6ad7aeb606666b00ca5be89b617e95813b42a7c38ff6bd0a35d815e4504d3a21cd24f1a7a28f03e1602cb72d86316db99a43932f747122584b06cf22bdbda7fbc8016ce08817762e459dc7dde5e628277f0ae64c3e055bf1268b47df4cca549f2d1689766f92e240caac92c58f97d5c29ae11f0563957ed95b2a3b3df126212317b2a1c8ac245cf3e8c1a12886ee58d5b941d0694d1c47981ce96210aedc368b4aec39f3775bf461bd4c3b1bb6706a6155f83a8878a7c01e7fce2986e32591f72eed6c9057813e0437a2fad6dafa5f7729efa1e75000766623e86a33db28c8e17f606457c766e2580f8f242df1dfcb02d395523be705fb2c89ebc333e2c693763022bf157194af83ea2d9dd322926260654110ed8aaeb65581ea1536c0bc881607c64cfb92c3a2a571746d2ccaf3251bc11a6be7e73d18c067680a5bf5d03b6342ad46fe37367952b873f838edc12c64307e70eb57a3914bedc99c6c9d24bbde902bfe089656beed9e81c03031446023df11c3b2b543e10c73d21b5bcf6ce64d9e10e8fcb6256e01098a565b6ed7a6a2ea9f04584a6f22f0a7d3e328ac5594413666552541cfa167706cbcdf64cdd7e554f078eae1bc92671c2d8be2ec3ccaa3658ab78bd1445ceb74a2f02dbe514c0f74b9a289abeac45795384ab4520bf62558022fd1a0b9ba7e8c1e6965c8edc888bbd0cbc809da158c96c38fcb784b79e0f99167cf60393b5f801823978ea94648782ae2b8ce9e680723c624f40082afc0b2129cebc5781f97acec990ef35f3dd8ed9234b7c7e98318098368796d1c4a8a7f20e6256a0d75f436c57dded8be3e2da1bb11b0df1413ca850952d7bbc58e973bef248751c2b46ba7d6550deb32b5e72147ef8e0f4350e4b5a466108d6b663d48d0c96641b93551292b0f919d3d26709121406d7de87db907d8ad040", 0x2, 0x0, 0x7fff}, 0x50) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8100c0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setreuid(0x0, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000df0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x101002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.194781044s ago: executing program 3 (id=156): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0xe) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x14de, &(0x7f0000002a40)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000003f40)={0x14b4, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd0}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_MEDIA={0xc8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4fa, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xce}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf67}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x544fe729}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10fc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x9c, 0x3, "0c3f55c80cbf3816d66c6f7819aadc1cd59135758d64a4f86cfef57bac72ab50fac81c75a86340ed5b692ba0fcf6ab0b0890c0049860e383c464f40e722c505a28adc3d260cec7465f07f244cbf0289f6540c0c9f332f2a385a0412a88411d69bbb41f441d12e5ae27b951ed42bf4452b003d9b39aca1383e66aad4d27300e5e224bb43ecce5298a7094bd4e985e953422d55ca42baa194d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6fa1e829}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1ba075bf791a6821ca59bb677689a4682c4ef6f54a53e3ea14541f6f500562"}}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}]}]}, 0x14b4}, 0x1, 0x0, 0x0, 0xc0}, 0x24040000) r5 = socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x1000, 0x800, 0x0) syz_clone3(&(0x7f0000000900)={0x88808400, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0, {0x10}, &(0x7f0000000840)=""/1, 0x1, &(0x7f0000000880)=""/19, &(0x7f00000008c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r1}}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000002080)=ANY=[@ANYBLOB="540900003a0002002cbd7000ffdbdf250f00000008002100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0800ec00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00h\x00', @ANYRES32, @ANYBLOB="85443915bd4eac8bf2c190711a4d8bdd70c2cc9adb1b97517105a3a0f4cfdc02838008006700", @ANYRES32=r6, @ANYBLOB="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"], 0x954}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40), 0x0, 0x4800) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000010a00000000000000000000000c00090008000080", @ANYRES32=r9, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xfffffe36, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="14000500fe8091"], 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r12 = dup(r11) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="74726120733d4855f9adf553f6983800c436bd63a466642c7266646e673d", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',\x00']) 7.62766604s ago: executing program 2 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_read_part_table(0x635, &(0x7f0000000000)="$eJzs3D9oXeUbB/DvSe899yaFtr8fTl1SncViZ28NSHqpdKp061IVJFQc4lSx5Ea6mCGDg7NLEbLUumjo4KAt4iROoYNacRWkqNQiPXLuOfdPBEFsOwifz5Dzvs953vd5n5yTMSf8py2kmxTjYS+dJMdf/kvGZiYJ6df5Sapue+/czuqp01VVVUWdcz7dPPn5oetJOu2S/nSbqqo2ppOTufrB0o13i1F353Zd9ObWgTq82BzjSPL0wbI/3mZuh1TVvoP1HuXvgX/n2uBWUVwp29lTvzxYST76efXs7pmt966/2IY3ki+T+vm/U78Xk+y3cvHYhc54WD/lN+f3/bW5lLPI7HEvprPvDKMr68PtlcHa3iRwdLjz6WvP/X7sRqoT+arsLExuFLP9ymT08O3X/R+u3/7tS4O1veHlxemNJ97//xdZbid3qypH6pL/y/hPZ/kRVAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HG4NriVZDTcTtb2hr02unp298xWmeSFV/tt6Pj8qgPt9WIu3KmvG1lPfvgk3fmkov4xjiyku9LEvl+unhkPOpP6vcVmcGmwtje8v5TcefbB0WGzKjc/OzErtzHdeTfPt6N7VWM82fy7JtsS1eEm7+v78/0XnWR9uD2uf/nHotM0/HExmh5zIcnrvbzSNFPdK9u1f8zaAAAAAAAAAAAAAAAAAAAAgIeyeur0G3fb8fl+kp/eXqjHVa/5L/diqdiX/20vWTyZXO2nGK0kuf3Sb+U3h7a+az8dMEovoyQHP9w81y4p920w/URAkap8nJ3xT/wZAAD//8Wbezo=") syz_mount_image$fuse(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=@gettaction={0x1c, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) (async, rerun: 64) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async, rerun: 32) r5 = getpid() (rerun: 32) r6 = syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16=r6], 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400000) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000200)={'\x00', 0x3, 0x9, 0x6, 0x5, 0x8000, r5}) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (rerun: 32) 6.862386712s ago: executing program 0 (id=163): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x5ae, &(0x7f00000016c0)="$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") chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000200)=0x60, 0x80000) getsockopt$nfc_llcp(r4, 0x118, 0x0, &(0x7f0000000280)=""/35, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 6.829407675s ago: executing program 3 (id=164): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf252b00000008000200", @ANYRES32=0x0, @ANYBLOB="b736baefcaaf"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write(r2, &(0x7f0000001300)="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", 0x1000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000120000000000000001"]) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r13}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r12}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4044000) 6.786064629s ago: executing program 4 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', 0x0, 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 6.658381509s ago: executing program 1 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_clone3(&(0x7f0000000340)={0x42107480, &(0x7f00000003c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa679", 0x5}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffdebbbbbbbbbbbb08004500003c00000000000190780a010102ac1414aa03049078010000004800000000000000001100000000000000000000440c0001ac1414bb4e210000"], 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.593412575s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x2, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x5) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000690003050000000000000000000000000000000008000100020000001fa64252633b1ffe9d9f9bba382ee318393bdfa8378ba2256dfbba768115653955b32d3fac91f697f56b0da0318fe5f8315a9b7a04ad02950aa354fa182b"], 0x20}}, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000000), 0x85, 0x8000) sendmsg(r7, 0x0, 0x20000824) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ptrace$cont(0x9, r0, 0x9, 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000580)=ANY=[@ANYBLOB="74616d655f6f66667365743d3078303030303030303030303030303066372c6e6f636173652c73686f77657865632c666c7573682c6e66732c6e6f646f74732c646f74730c71756965742c6e6f876f74732c6e6f646f74732c636865636b3d7374726963742c6e6f646f74732c646f667365743d3078666666666666666666666266a4bab6617e66ff0700000000000001010000000000006b3d6e6f726d616c2c00"], 0x1, 0x261, &(0x7f0000000ac0)="$eJzs3c1qE1EUB/CTNp/dmAdwMejGVVHfIEgEcUCIZKErA9VNK0K6ia7yGD6Dz+CT+Bhd1dWImWDaqXVR56NNfj8Ic8ifmzmXQG4W9ybv7n88Pvp0+iH78TX6/STaEcs4jxjGXuxHrrW+7q3qbly0DADgrplMZqOme6BErSvPDCJi1omI3pVo+q2mrgAAAAAAAAAAAChZJfv/H/zMVqpuHgC4Efv/t998PpodrL+/XWb/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCc8yy7l/3j0XR/AED5rP8AsHus/wCwey6v/92w/gPA9nv95u3LUZqOJ0nSjzhbLqaLaX7N8+cv0vHjZGW4GXW2WEw76zodP8nzpJgfrMc//WvejUcP8/x39uxVWsh7cVT15AEAAAAAAAAAAAAAAAAAAOCWOEz+KJzv38/zw+vyvLrw+wCF8/vt6LVrmwYAAAAAAAAAAAAAAAAAAADcaaefvxzPTk7ezystWq3Kb1F70Yn/Gf69msYGUcrrDOIGo/rR/JuiKK1o+pMJAAAAAAAAAAAAAAAAAAB2z+bQb9OdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBzNv//X11xza2HNU8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HK/AgAA//8J05R7") getresuid(0x0, 0x0, 0x0) 5.574738337s ago: executing program 2 (id=168): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) io_setup(0x23, &(0x7f0000000280)=0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000020000850000006000000021f21def4d6736e8"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000007000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x9, &(0x7f0000000480)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000500)='GPL\x00', 0x2, 0xc4, &(0x7f00000007c0)=""/196, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x2, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_complete\x00', r6, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) ioctl$VT_RELDISP(r9, 0x5605) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r10 = getpgid(0x0) capset(&(0x7f00000003c0)={0x20071026, r10}, &(0x7f0000000440)={0x7, 0x1f40, 0x1ff, 0x0, 0x0, 0xf}) syz_clone(0x80014000, &(0x7f0000000280)="794d1026b352e6cdcfe81ec5c0597912a9369e83801692d81b8f5f14b9669dd18eb926e6498991a014769c448d33513e35292d832f8b69cdfab9ecbfa65987552eef3e215e6a6d6c361c08bd36e9a6258e31f3b32ad0d23ea0d3689ac0cbb3a6a40336a8f9c099d19982a87c70f4e99257866f54490224243c599fec2297dcac375785e314e80b5f97ebb9829b925a30f82780897fa4c3ebeb952d839579ffdda87862617275243fce574271189460146cf0af7820c0d183ea1d3274853fdf7d73e89b910d4cacb214a895a01ddc7df1a7e5cfa22492536abb6837a009d3f999ea", 0xe1, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f0000001000)="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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x5d90309a22e300f8, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 5.500570323s ago: executing program 4 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1100000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(r2, &(0x7f0000001c00)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0xffffffffffffff80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000640)=""/38, 0x2a}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000600)=""/53, 0x44}, {&(0x7f0000000680)=""/1, 0x1}], 0x6, &(0x7f0000000740)=""/44, 0x2c}, 0x1}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/134, 0x86}, {&(0x7f0000000840)=""/114, 0x72}, {&(0x7f00000008c0)=""/203, 0xcb}, {&(0x7f0000000ac0)=""/142, 0x8e}, {&(0x7f00000009c0)=""/33, 0x31}, {&(0x7f0000001cc0)=""/3, 0x3}], 0x6, &(0x7f0000000c00)=""/4096, 0x1000}, 0x3f49}], 0x2, 0x2005, &(0x7f0000001c80)={0x0, 0x989680}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') read$usbfs(r4, &(0x7f0000000000)=""/13, 0xd) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001d00)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c910feff"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 5.199487968s ago: executing program 0 (id=170): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) dup3(r0, r1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_migrate_pages\x00', r1}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) 4.975223865s ago: executing program 3 (id=171): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x81, 0x2ae, &(0x7f0000001980)="$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") mkdir(0x0, 0xfffffffffffffffe) (async) mkdir(0x0, 0xfffffffffffffffe) mount$incfs(0x0, 0x0, 0x0, 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x75bb]}, 0x8, 0x800) (async) r1 = signalfd4(r0, &(0x7f00000000c0)={[0x75bb]}, 0x8, 0x800) getdents64(r1, &(0x7f0000000240)=""/108, 0x6c) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000090828efd9cf306a2df8144", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000090828efd9cf306a2df8144", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0xa65}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 4.972406166s ago: executing program 1 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x840000000002, 0x3, 0xff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x54f4, &(0x7f0000005600)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) chdir(0x0) syz_create_resource$binfmt(0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x2000000, {0x3, 0x3}}]}}, &(0x7f0000000140)=""/240, 0x32, 0xf0, 0x1}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="f6000000010000000000000004000000000000a3fc000000e50000002000000000000000"], 0x24, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10, 0x0}}], 0x2, 0x4004040) setgroups(0x7, &(0x7f00000004c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000540)={'gre0\x00', &(0x7f00000006c0)={'gre0\x00', 0x0, 0x8, 0x700, 0x18, 0x167, {{0xe, 0x4, 0x2, 0x18, 0x38, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0xa, "44a017063470dc95"}, @rr={0x7, 0xb, 0x4, [@multicast1, @remote]}, @ssrr={0x89, 0xf, 0x93, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}]}}}}}) write$FUSE_STATX(r5, &(0x7f0000000580)={0x130, 0xfffffffffffffff5, 0x0, {0x1000, 0x5, 0x0, '\x00', {0x10, 0x1313, 0x4, 0x7, 0x0, 0x0, 0xc000, '\x00', 0x1, 0xfffffffffffffff7, 0x8, 0xfff, {0x3, 0x1000}, {0x748d, 0x1}, {0x10, 0x9}, {0x2e562fdd, 0x5}, 0x2, 0x9, 0x3, 0x94}}}, 0x130) 4.970140876s ago: executing program 2 (id=173): r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0xe, 0x131003) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x1, 0xfffffffd}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="080403000021000008001b000000000034001a800800028004000180200002"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x101000) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f00000001c0)) 2.425619493s ago: executing program 0 (id=174): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r2 = syz_open_procfs(0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000080)={0x9, 0xfffffffffffffff9}) write$UHID_INPUT2(r2, &(0x7f00000000c0)={0xc, {0x85, "35603b634adf5d559857f354edc3f332ea6310513663330b0b25e711a2af1a2ad6435edca0ae2bea57741624b1077ea9706cd97a0fd8cee31a3b2b3a28128c8e6267671acb0151c76d6e02e5b6dd124a1625baaed901a6b9e6b95cbe0aa03b7c1d03dbc8473ed090ed6d0f0147e55d3beed7cab5a137b5a3152f701c1b6018658d97a1dbb8"}}, 0x8b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) (async, rerun: 32) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (rerun: 32) read$rfkill(r4, 0x0, 0x0) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) (async, rerun: 64) r7 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (rerun: 64) write$selinux_access(r7, &(0x7f0000000280)=ANY=[@ANYBLOB='system_u:object_r:sendmail_exec_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x68) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100697069700000000014000280080003000a010100050004000000000084743183dc8ccee446735c057177e7e4951616239170f21011ba2ad699183e69d098c1c7a5162d2467f913063b5976bbb5bf7d582bd5716d1490299e177e12a5d6d7cf25e4d5565ea35bc2db2f39fb788dd1a3e0ece65286609dbdeeeb9f7d65f036c3aaeec689de398d772aba02dfe174c25d1f5dc81ea05603ecd77dc4d879"], 0x44}}, 0x0) (rerun: 64) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) (async) r12 = socket(0x1e, 0x805, 0x0) connect$tipc(r12, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) (async) connect$tipc(r12, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) (async) close(r12) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r10, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r13, &(0x7f0000000380)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 2.240180288s ago: executing program 0 (id=175): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000005c0)=@framed={{}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000000)=0x9, 0x4) 1.972825159s ago: executing program 4 (id=176): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r4}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r5) (async) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) chmod(0x0, 0x100) (async) chmod(0x0, 0x100) 1.587166501s ago: executing program 2 (id=177): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "b794748b8633fdd1", "300938c508eaff243981a11f8bf53a813325077d664c5558f0ffbb885e4b0d6b", "1074873b", "66aac5db4280f353"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001800)={0x0, "6a54ce84b14bd78a138a8809ea3479eb"}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000740)={r7, 0x0, 0xc295d940000000, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @empty, @remote, {[@timestamp_addr={0x44, 0x44, 0xd3, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x2, 0x20800) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 1.430594344s ago: executing program 3 (id=178): r0 = fsopen(&(0x7f0000000040)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='rpc_clnt_new_err\x00', r1}, 0x18) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mount$incfs(&(0x7f0000000300)='./bus\x00', &(0x7f0000000400)='./bus\x00', &(0x7f0000000500), 0xc802, 0x0) 1.429978104s ago: executing program 2 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1.425455064s ago: executing program 4 (id=180): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414bb0063a823e9e639521206dfb57b2617411680fc18f37ed9da79354d5af6eec0c0072bdd8cfd627f0b926ad0b47363e7460a28f7e7ce25eed476715e5818eacf3a2b6d5f5b2866fe7dee5e39e9bcb81ab922a60a3eb8cea2af6d516dfa2e1678e9c2f83886"], 0x18}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x4e7c6dcd, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x400000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x1, 0x3, 0x1, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xbd, &(0x7f0000000280)=""/189, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x11, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r2, 0x1, &(0x7f0000000400)=[r1, r1, r1, r1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x5, 0x8, 0x1}], 0x10, 0x2}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x1}, "01"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x6d, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0xd, 0x4, 0x3, 0x36, 0x5f, 0x68, 0x0, 0x3e, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x9, [0x5, 0xbf5]}, @generic={0x7, 0xb, "7197d07981df247867"}]}}, @payload_named={{{{{0x2b, 0x0, 0x1, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2, 0x6, 0x5, 0x1, 0x4e20, 0x4e24}, 0x0, 0x2}, 0x2, 0x2}}, [0x0, 0x0, 0x0]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x3, 0x1, 0x0, 0x1d, {0x9, 0x21, 0xf800, 0xdf, 0x1, {0x22, 0xb3}}, {{{0x9, 0x5, 0x81, 0x3, 0x9a24824d8b6ef257, 0x0, 0x0, 0xe}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000000ec0)={0x24, 0x0, &(0x7f0000000d40)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000001940)={0x24, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000002240)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 1.162990395s ago: executing program 0 (id=181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000a36312a6cff98600e0a357fbb1b4ce49a26629b6ef22987dd7d030e88114c15682fbb0185275138e38469d79ef4292551cfcd518f02133d421069fd44013a2bbcfbd80b169c14ba6d95de7d43e803250bf82dde1834b24a951c5d1054e0df7290f9eb7b3c190522dcee7cf2b810443df2079a815de9e43f310265c5dd07989dc6c6fd7fcdb4c66611e05bc381abafd9bb4a264a012d8cc9cb4aa1b3d583e60", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x400d0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="e72a1d6d00b703f70000"], 0xc) write$vga_arbiter(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="796e6c6f636b20696f2b6d650400"], 0xe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="a8af5106423e576c7dcf9a40cbf252d4abe027b264b8c6475cf23e18850801acd53cd834aa9c5a6cd123a7f7bb04d7475d82b046d61b43a62c53f21d8ad286ffcd2bda5abf73b8fe84611497d75bfede4c87a3c115ca6f2bbfafdbd89fe0148db7f5040b182a7b96a4de72436179a8b7088e687bf20f998d2bf9a0880edcf0b6d48f8abecada0fdb8a41ec4d0ca18f125f75bbb96cef5f7b41f8e51e96e5aee6fdd69437acb7edd014b491b00ca9c5a385500dfb10c3538de1b2a7ae00be00cb53cade71e68772e50c1ceb"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x56139abf880448a1, 0xc}, {0xfff1}, {0xfff2, 0xa}}, [{0x8, 0xb, 0x4b5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) 335.165432ms ago: executing program 4 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16], 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r1}, 0x18) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r3 = dup(r2) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60041, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="387d5245e12cfe6ac916a0", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000280ff02000000000000000000000000000186dd0000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) (async, rerun: 64) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c090003042402020424"], 0x0) (rerun: 64) 273.767577ms ago: executing program 2 (id=183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000ec0)={{r2}, r3, 0x8, @inherit={0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, @subvolid=0x4}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000001c0)={0x0, "c2d199042b7bccb888a2935b4d2f20d2"}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000011c0)={{r0}, r3, 0x2, @unused=[0x80, 0x5, 0xaa97, 0x4], @devid=r4}) 194.474034ms ago: executing program 3 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000040)={0x1, 0x0, [{0x40000001, 0x1, 0x2, 0x6, 0xa, 0xfff, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x608400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000020000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$tipc(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r7) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @pic={0x0, 0x3, 0x7, 0x5, 0x0, 0x4, 0xb, 0x0, 0x9, 0xe, 0x7, 0x5, 0x5, 0x3, 0xfa, 0x3}}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = userfaultfd(0x80001) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) 189.453074ms ago: executing program 4 (id=185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="000472160556c49a8f77d21f2a5ddadd0700000000000000b9773e93b10bea54840856fcb2d48332a9bc03c716106c3045d5f3c338b810be692d50a50b8a1c4a287b3eb1bc43e5135e8d", @ANYRES16], 0x1, 0x1534, &(0x7f0000002d00)="$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") syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) 0s ago: executing program 0 (id=186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000950b0000000000cd"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000008000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000004400050020010000000000000000000000000002000000002b"], 0xfc}}, 0x200408c0) syz_usb_connect(0xb000000, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000012c35b400304106098c6000000010902120001000000000904"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ba9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) setitimer(0x2, &(0x7f0000000280)={{}, {0x0, 0x2710}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6000200000183aff00000001000000000068f20000000000008000000000000000000000000000aa8700907800000000fe8000000000000000000000000000aa"], 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r9}, 0x10) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x835, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r10, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 30.744686][ T24] audit: type=1400 audit(1756362144.520:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.747371][ T267] cgroup: Unknown subsys name 'net' [ 30.767541][ T24] audit: type=1400 audit(1756362144.520:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.794891][ T24] audit: type=1400 audit(1756362144.550:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.795263][ T267] cgroup: Unknown subsys name 'devices' [ 30.996525][ T267] cgroup: Unknown subsys name 'hugetlb' [ 31.002264][ T267] cgroup: Unknown subsys name 'rlimit' [ 31.233333][ T24] audit: type=1400 audit(1756362145.010:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.256609][ T24] audit: type=1400 audit(1756362145.010:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.281443][ T24] audit: type=1400 audit(1756362145.010:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.297777][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.313854][ T24] audit: type=1400 audit(1756362145.090:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.339412][ T24] audit: type=1400 audit(1756362145.090:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.372621][ T24] audit: type=1400 audit(1756362145.140:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.398172][ T24] audit: type=1400 audit(1756362145.150:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.398232][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.612373][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.619593][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.627814][ T278] device bridge_slave_0 entered promiscuous mode [ 33.642018][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.649188][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.657207][ T278] device bridge_slave_1 entered promiscuous mode [ 33.699181][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.706666][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.714553][ T275] device bridge_slave_0 entered promiscuous mode [ 33.723486][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.730556][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.738718][ T275] device bridge_slave_1 entered promiscuous mode [ 33.830350][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.837517][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.845562][ T276] device bridge_slave_0 entered promiscuous mode [ 33.853245][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.860330][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.868355][ T276] device bridge_slave_1 entered promiscuous mode [ 33.875405][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.882586][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.890653][ T277] device bridge_slave_0 entered promiscuous mode [ 33.901389][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.908640][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.916694][ T277] device bridge_slave_1 entered promiscuous mode [ 34.037968][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.045117][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.053117][ T279] device bridge_slave_0 entered promiscuous mode [ 34.081106][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.088246][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.096156][ T279] device bridge_slave_1 entered promiscuous mode [ 34.367544][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.374671][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.382113][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.389258][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.398662][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.405758][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.413520][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.420591][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.474455][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.481540][ T278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.488954][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.496048][ T278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.522072][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.529178][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.536567][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.543669][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.574031][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.581131][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.588533][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595667][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.619364][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.627681][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.636161][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.643846][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.651382][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.658814][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.666126][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.673660][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.681693][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.689117][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.733814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.741473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.765275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.773321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.791105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.799982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.809679][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.816752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.824721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.833276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.841556][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.848643][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.878872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.888164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.898091][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.905182][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.913155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.922139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.930556][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.937685][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.950241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.958007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.981831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.990232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.999181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.008495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.016900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.024698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.032271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.040126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.060025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.068727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.077404][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.084486][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.092593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.101218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.109788][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.116864][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.124401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.133044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.141441][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.148521][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.156150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.164775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.173193][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.180347][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.204478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.213840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.222268][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.229348][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.253384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.262087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.270910][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.278019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.286826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.295200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.303450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.333788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.342134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.350512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.359816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.368147][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.377065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.390103][ T277] device veth0_vlan entered promiscuous mode [ 35.413302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.422067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.430696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.439035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.448189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.476413][ T277] device veth1_macvtap entered promiscuous mode [ 35.485382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.495324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.504893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.532421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.554777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.563692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.571384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.581423][ T279] device veth0_vlan entered promiscuous mode [ 35.592868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.601620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.610732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.635934][ T275] device veth0_vlan entered promiscuous mode [ 35.643300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.651967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.660319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.668231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.677852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.686546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.695433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.713144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.721566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.735538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.743640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.751520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.760832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.779454][ T276] device veth0_vlan entered promiscuous mode [ 35.786307][ T278] device veth0_vlan entered promiscuous mode [ 35.794004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.802187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.811893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.820394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.852744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.861316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.879050][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.887865][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.899227][ T278] device veth1_macvtap entered promiscuous mode [ 35.911846][ T279] device veth1_macvtap entered promiscuous mode [ 35.922060][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.930137][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.938200][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.946584][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.955389][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.964089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.975371][ T276] device veth1_macvtap entered promiscuous mode [ 35.988525][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 35.988558][ T24] audit: type=1400 audit(1756362149.760:83): avc: denied { mounton } for pid=277 comm="syz-executor" path="/root/syzkaller.J3Izfi/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.020043][ T277] request_module fs-gadgetfs succeeded, but still no fs? [ 36.021597][ T24] audit: type=1400 audit(1756362149.760:84): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.049651][ T24] audit: type=1400 audit(1756362149.760:85): avc: denied { mounton } for pid=277 comm="syz-executor" path="/root/syzkaller.J3Izfi/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.057099][ T275] device veth1_macvtap entered promiscuous mode [ 36.081479][ T24] audit: type=1400 audit(1756362149.760:86): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.104199][ T24] audit: type=1400 audit(1756362149.760:87): avc: denied { mounton } for pid=277 comm="syz-executor" path="/root/syzkaller.J3Izfi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.130935][ T24] audit: type=1400 audit(1756362149.770:88): avc: denied { mounton } for pid=277 comm="syz-executor" path="/root/syzkaller.J3Izfi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=15640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.148702][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.179603][ T24] audit: type=1400 audit(1756362149.770:89): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.181844][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.207112][ T24] audit: type=1400 audit(1756362149.790:90): avc: denied { mounton } for pid=277 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.209578][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.231230][ T24] audit: type=1400 audit(1756362149.800:91): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.239645][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.261062][ T24] audit: type=1400 audit(1756362149.800:92): avc: denied { mounton } for pid=277 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 36.270107][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.301476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.310382][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.319020][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.328015][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.336672][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.350418][ T277] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 36.379203][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.389419][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.399862][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.409863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.427256][ T300] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.428765][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.442697][ T300] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 36.443951][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.449996][ T300] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 36.459505][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.473432][ T300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 36.475545][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.482819][ T300] System zones: 1-12 [ 36.504471][ T300] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2: corrupted in-inode xattr [ 36.516826][ T300] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 36.532342][ T300] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,grpid,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,mblk_io_submit,,errors=continue [ 36.791095][ T311] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.932432][ T314] erofs: (device loop3): mounted with root inode @ nid 36. [ 36.973440][ T317] ====================================================== [ 36.973440][ T317] WARNING: the mand mount option is being deprecated and [ 36.973440][ T317] will be removed in v5.15! [ 36.973440][ T317] ====================================================== [ 37.247531][ T311] erofs: (device loop0): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 37.265570][ T317] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000002, [ 37.295401][ T317] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.408535][ T326] erofs: (device loop3): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 38.672975][ T329] erofs: Unknown parameter '/Sn^*/:Lkyһ<]ոA0Mr?tl5}bmQWEɆAuybs4 8D$D' [ 38.732489][ C0] sched: RT throttling activated [ 39.003442][ T306] F2FS-fs (loop2): invalid crc value [ 39.044752][ T306] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.132688][ T302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.232962][ T306] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 39.252890][ T306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 39.357504][ T306] fuse: Bad value for 'fd' [ 39.372533][ T302] usb 1-1: Using ep0 maxpacket: 16 [ 39.408176][ T279] attempt to access beyond end of device [ 39.408176][ T279] loop2: rw=2049, want=45104, limit=40427 [ 39.475288][ T280] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.502771][ T302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.513190][ T302] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 39.527775][ T302] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 39.537320][ T302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.548208][ T302] usb 1-1: config 0 descriptor?? [ 39.573551][ T341] FAT-fs (loop1): Unrecognized mount option "18446744073709551615" or missing value [ 39.593866][ T302] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 39.732843][ T280] usb 5-1: Using ep0 maxpacket: 32 [ 39.742057][ T348] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 39.852653][ T280] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 39.860705][ T280] usb 5-1: config 0 has no interface number 0 [ 39.877164][ T280] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 50, changing to 9 [ 39.898493][ T280] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 39.919927][ T280] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 39.940157][ T280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.954051][ T328] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 40.019942][ T358] syz.3.11[358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.020066][ T358] syz.3.11[358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.041950][ T53] usb 1-1: USB disconnect, device number 2 [ 40.147860][ T280] usb 5-1: config 0 descriptor?? [ 40.172627][ T280] usb 5-1: can't set config #0, error -71 [ 40.182259][ T280] usb 5-1: USB disconnect, device number 2 [ 40.194053][ T358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11'. [ 40.652792][ T302] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 41.042210][ T24] kauditd_printk_skb: 55 callbacks suppressed [ 41.042241][ T24] audit: type=1400 audit(1756362154.810:148): avc: denied { create } for pid=367 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.070038][ T24] audit: type=1400 audit(1756362154.830:149): avc: denied { write } for pid=367 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.095199][ T24] audit: type=1400 audit(1756362154.830:150): avc: denied { read } for pid=367 comm="syz.4.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.115802][ T24] audit: type=1400 audit(1756362154.840:151): avc: denied { ioctl } for pid=367 comm="syz.4.14" path="socket:[15937]" dev="sockfs" ino=15937 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.143238][ T24] audit: type=1400 audit(1756362154.900:152): avc: denied { create } for pid=340 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.164511][ T24] audit: type=1400 audit(1756362154.900:153): avc: denied { connect } for pid=340 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.192543][ T302] usb 4-1: Using ep0 maxpacket: 16 [ 41.207030][ T372] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 41.224972][ T372] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.232899][ T24] audit: type=1400 audit(1756362154.900:154): avc: denied { write } for pid=340 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 41.236406][ T368] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.14: invalid indirect mapped block 10 (level 1) [ 41.258785][ T372] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 41.272717][ T372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.286149][ T372] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 41.304674][ T372] EXT4-fs (loop2): 1 truncate cleaned up [ 41.310456][ T372] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,noquota, [ 41.327199][ T302] usb 4-1: config index 0 descriptor too short (expected 8228, got 36) [ 41.342807][ T302] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 41.353006][ T302] usb 4-1: config 0 has no interfaces? [ 41.362579][ T302] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.371682][ T302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.378415][ T368] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.14: invalid indirect mapped block 8 (level 1) [ 41.403647][ T302] usb 4-1: config 0 descriptor?? [ 41.427798][ T24] audit: type=1400 audit(1756362155.200:155): avc: denied { append } for pid=370 comm="syz.2.15" path="/2/bus/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.451867][ T368] EXT4-fs (loop4): 1 truncate cleaned up [ 41.460944][ T368] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 41.507881][ T24] audit: type=1400 audit(1756362155.280:156): avc: denied { ioctl } for pid=367 comm="syz.4.14" path="/2/file0/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.604055][ T24] audit: type=1400 audit(1756362155.310:157): avc: denied { lock } for pid=367 comm="syz.4.14" path="/2/file0/cgroup.kill" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.722574][ T302] usb 4-1: string descriptor 0 read error: -71 [ 41.734275][ T302] usb 4-1: USB disconnect, device number 2 [ 42.742691][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.844434][ T406] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 42.857223][ T378] : renamed from bond_slave_0 [ 42.891488][ T406] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 42.901071][ T412] futex_wake_op: syz.4.22 tries to shift op by -1; fix this program [ 42.922759][ T406] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.19: invalid indirect mapped block 2683928664 (level 1) [ 43.043069][ T406] EXT4-fs (loop2): Remounting filesystem read-only [ 43.050092][ T406] EXT4-fs (loop2): 1 truncate cleaned up [ 43.143692][ T406] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=." [ 43.162606][ T389] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 43.349280][ T419] fuse: Bad value for 'fd' [ 43.472626][ T389] usb 4-1: device descriptor read/64, error -71 [ 43.933645][ T419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.943887][ T419] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 43.952435][ T419] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #16: comm syz.4.23: mark_inode_dirty error [ 43.964355][ T419] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 43.972988][ T419] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #16: comm syz.4.23: mark_inode_dirty error [ 43.984495][ T419] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 43.993177][ T419] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 44.001260][ T419] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 44.009795][ T419] EXT4-fs error (device loop4): ext4_truncate:4390: inode #16: comm syz.4.23: mark_inode_dirty error [ 44.021109][ T419] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3108: error 27 [ 44.030562][ T419] EXT4-fs (loop4): 1 truncate cleaned up [ 44.037177][ T419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 44.062801][ T389] usb 4-1: device descriptor read/64, error -71 [ 44.190403][ T431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27'. [ 44.482666][ T389] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 44.772934][ T389] usb 4-1: device descriptor read/64, error -71 [ 45.222760][ T389] usb 4-1: device descriptor read/64, error -71 [ 45.324314][ T448] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 45.333523][ T448] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.362993][ T389] usb usb4-port1: attempt power cycle [ 45.409185][ T451] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue [ 45.422713][ T451] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.444197][ T451] EXT4-fs (loop1): shut down requested (2) [ 45.488955][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 45.505608][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.529864][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 45.540010][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.548795][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.559782][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.568631][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.585460][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.774537][ T389] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 46.154218][ T467] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 46.234763][ T467] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.257198][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 46.257255][ T24] audit: type=1400 audit(2000000001.990:178): avc: denied { create } for pid=472 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.442734][ T389] usb 4-1: device descriptor read/8, error -71 [ 46.486540][ T24] audit: type=1400 audit(2000000002.220:179): avc: denied { create } for pid=475 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.542588][ T24] audit: type=1400 audit(2000000002.250:180): avc: denied { setopt } for pid=475 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.582553][ T24] audit: type=1400 audit(2000000002.290:181): avc: denied { append } for pid=464 comm="syz.3.33" name="hwrng" dev="devtmpfs" ino=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 46.621791][ T24] audit: type=1400 audit(2000000002.290:182): avc: denied { read write } for pid=464 comm="syz.3.33" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.670333][ T24] audit: type=1400 audit(2000000002.290:183): avc: denied { open } for pid=464 comm="syz.3.33" path="/6/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.693464][ T389] usb 4-1: device descriptor read/8, error -71 [ 46.746803][ T24] audit: type=1400 audit(2000000002.480:184): avc: denied { audit_write } for pid=481 comm="syz.3.36" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.768430][ T24] audit: type=1107 audit(2000000002.480:185): pid=481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 48.405437][ T24] audit: type=1400 audit(2000000004.140:186): avc: denied { read } for pid=501 comm="syz.3.41" dev="nsfs" ino=4026532288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.455444][ T24] audit: type=1400 audit(2000000004.160:187): avc: denied { open } for pid=501 comm="syz.3.41" path="net:[4026532288]" dev="nsfs" ino=4026532288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.426898][ T507] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 49.630777][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 49.655763][ T519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.703955][ T519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.46: bg 0: block 384: padding at end of block bitmap is not set [ 49.718772][ T519] EXT4-fs (loop3): Remounting filesystem read-only [ 49.725725][ T519] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 49.735304][ T519] EXT4-fs error (device loop3): ext4_clear_blocks:880: inode #11: comm syz.3.46: attempt to clear invalid blocks 983260 len 1 [ 49.748987][ T519] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.46: Invalid inode table block 0 in block_group 0 [ 49.768374][ T519] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 49.780805][ T519] EXT4-fs error (device loop3) in ext4_orphan_del:3292: Corrupt filesystem [ 49.790043][ T519] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.46: Invalid inode table block 0 in block_group 0 [ 49.803086][ T519] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 49.813167][ T519] EXT4-fs error (device loop3): ext4_truncate:4390: inode #11: comm syz.3.46: mark_inode_dirty error [ 49.824673][ T519] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: Corrupt filesystem [ 49.837047][ T519] EXT4-fs (loop3): 1 truncate cleaned up [ 49.843044][ T519] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity, [ 49.891840][ T519] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.46: Invalid inode table block 0 in block_group 0 [ 49.907034][ T519] EXT4-fs (loop3): Remounting filesystem read-only [ 49.914565][ T519] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 49.926769][ T519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 49.940610][ T519] 9pnet: Insufficient options for proto=fd [ 49.947401][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 50.497381][ T535] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 50.680447][ T537] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 51.263230][ T549] erofs: (device loop1): mounted with root inode @ nid 36. [ 51.424164][ T554] incfs: Backing dir is not set, filesystem can't be mounted. [ 51.462707][ T554] incfs: mount failed -2 [ 51.653012][ T556] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 52.444365][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 52.444394][ T24] audit: type=1400 audit(2000000008.180:216): avc: denied { connect } for pid=551 comm="syz.4.54" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.733610][ T24] audit: type=1400 audit(2000000008.210:217): avc: denied { write } for pid=551 comm="syz.4.54" laddr=::1 lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.987933][ T24] audit: type=1400 audit(2000000010.720:218): avc: denied { read } for pid=579 comm="syz.2.60" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.051287][ T24] audit: type=1400 audit(2000000010.740:219): avc: denied { open } for pid=579 comm="syz.2.60" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.134024][ T24] audit: type=1400 audit(2000000010.740:220): avc: denied { write } for pid=579 comm="syz.2.60" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.222669][ T5] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.312544][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 55.502601][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 55.604688][ T24] audit: type=1400 audit(2000000011.340:221): avc: denied { ioctl } for pid=588 comm="syz.1.63" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 55.662757][ T5] usb 5-1: unable to get BOS descriptor or descriptor too short [ 55.682887][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.711272][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.725165][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.738886][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.748334][ T5] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 55.757286][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.765414][ T5] usb 5-1: config 13 has no interface number 0 [ 55.772645][ T5] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 55.783438][ T5] usb 5-1: config 13 interface 50 has no altsetting 0 [ 55.790709][ T53] usb 1-1: config 0 descriptor?? [ 55.962675][ T5] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 55.982137][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.992250][ T5] usb 5-1: Product: syz [ 55.996499][ T5] usb 5-1: Manufacturer: syz [ 56.006862][ T5] usb 5-1: SerialNumber: syz [ 56.032644][ T577] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 56.132727][ T601] incfs: Backing dir is not set, filesystem can't be mounted. [ 56.146369][ T601] incfs: mount failed -2 [ 56.329894][ T53] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 56.343141][ T602] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 56.352434][ T602] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.353092][ T53] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 56.656310][ T577] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 56.720160][ T577] System zones: 0-2, 18-18, 34-35 [ 56.880558][ T577] EXT4-fs error (device loop4): ext4_quota_enable:6447: inode #4: comm syz.4.58: iget: bad i_size value: 5910974510929920 [ 57.135564][ T24] audit: type=1400 audit(2000000012.680:222): avc: denied { create } for pid=578 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.252764][ T577] EXT4-fs error (device loop4): ext4_quota_enable:6450: comm syz.4.58: Bad quota inode: 4, type: 1 [ 57.265747][ T24] audit: type=1400 audit(2000000013.000:223): avc: denied { write } for pid=578 comm="syz.0.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 57.302746][ T577] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.368440][ T24] audit: type=1400 audit(2000000013.070:224): avc: denied { create } for pid=619 comm="syz.2.68" dev="anon_inodefs" ino=15102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.431188][ T628] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000000010DB|0xffffffffffffffffmemory.events [ 57.433899][ T577] EXT4-fs (loop4): mount failed [ 57.482740][ T629] netlink: 'syz.3.69': attribute type 27 has an invalid length. [ 57.518604][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.526032][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.540199][ T24] audit: type=1400 audit(2000000013.270:225): avc: denied { read append } for pid=627 comm="syz.3.69" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.584450][ T620] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.601060][ T24] audit: type=1400 audit(2000000013.270:226): avc: denied { open } for pid=627 comm="syz.3.69" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.632616][ T620] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 57.639898][ T24] audit: type=1400 audit(2000000013.270:227): avc: denied { ioctl } for pid=627 comm="syz.3.69" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.651723][ T620] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 57.714661][ T581] udc-core: couldn't find an available UDC or it's busy [ 57.741688][ T581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 57.842556][ T280] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 57.933606][ T638] EXT4-fs (loop4): Ignoring removed orlov option [ 57.958037][ T638] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue [ 57.972937][ T638] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.021767][ T638] EXT4-fs error (device loop4): ext4_lookup:1830: inode #12: comm syz.4.71: iget: bad i_size value: 2533274857506816 [ 58.044884][ T638] EXT4-fs error (device loop4): ext4_lookup:1830: inode #12: comm syz.4.71: iget: bad i_size value: 2533274857506816 [ 58.058149][ T638] EXT4-fs error (device loop4): ext4_lookup:1830: inode #12: comm syz.4.71: iget: bad i_size value: 2533274857506816 [ 58.229043][ T24] audit: type=1326 audit(2000000013.950:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0980712be9 code=0x7ffc0000 [ 58.253162][ T24] audit: type=1326 audit(2000000013.950:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=648 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0980712be9 code=0x7ffc0000 [ 58.430453][ T653] erofs: (device loop1): mounted with root inode @ nid 36. [ 59.383652][ T657] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 60.770281][ T667] incfs: Backing dir is not set, filesystem can't be mounted. [ 60.779130][ T667] incfs: mount failed -2 [ 61.391440][ T24] audit: type=1400 audit(2000000017.100:230): avc: denied { name_bind } for pid=663 comm="syz.4.75" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.741536][ T24] audit: type=1400 audit(2000000017.100:231): avc: denied { node_bind } for pid=663 comm="syz.4.75" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 64.742016][ T24] audit: type=1400 audit(2000000020.470:232): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 65.354387][ T24] audit: type=1400 audit(2000000021.090:233): avc: denied { block_suspend } for pid=681 comm="syz.0.83" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 65.394671][ T24] audit: type=1400 audit(2000000021.130:234): avc: denied { map } for pid=681 comm="syz.0.83" path="socket:[16354]" dev="sockfs" ino=16354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.418747][ T485] usb 1-1: USB disconnect, device number 3 [ 65.491676][ T24] audit: type=1400 audit(2000000021.130:235): avc: denied { read } for pid=681 comm="syz.0.83" path="socket:[16354]" dev="sockfs" ino=16354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.545395][ T692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.83'. [ 65.573440][ T24] audit: type=1400 audit(2000000021.280:236): avc: denied { ioctl } for pid=681 comm="syz.0.83" path="socket:[16364]" dev="sockfs" ino=16364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.602704][ T5] usb 5-1: MIDIStreaming interface descriptor not found [ 65.771174][ T696] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 65.858655][ T24] audit: type=1400 audit(2000000021.590:237): avc: denied { mounton } for pid=695 comm="syz.3.85" path="/22/file0/file0" dev="loop3" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.937782][ T701] EXT4-fs (loop4): Test dummy encryption mode enabled [ 65.968785][ T701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 66.024529][ T701] EXT4-fs (loop4): 1 truncate cleaned up [ 66.030277][ T701] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 66.087482][ T24] audit: type=1400 audit(2000000021.820:238): avc: denied { write } for pid=275 comm="syz-executor" name="file0" dev="loop3" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.125061][ T24] audit: type=1400 audit(2000000021.840:239): avc: denied { remove_name } for pid=275 comm="syz-executor" name="file0" dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.148538][ T24] audit: type=1400 audit(2000000021.840:240): avc: denied { unlink } for pid=275 comm="syz-executor" name="file0" dev="loop3" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 66.242675][ T686] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 66.248862][ T688] xt_bpf: check failed: parse error [ 66.290292][ T686] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.335061][ T710] EXT4-fs (loop3): #blocks per group too big: 466944 [ 66.381538][ T686] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.648700][ T686] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 66.658011][ T686] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 68.458233][ T701] syz.4.86[701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.458346][ T701] syz.4.86[701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.472451][ T701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.563364][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 69.563396][ T24] audit: type=1400 audit(2000000025.300:244): avc: denied { watch watch_reads } for pid=747 comm="syz.3.97" path="/26" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.738653][ T24] audit: type=1400 audit(2000000025.470:245): avc: denied { create } for pid=750 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.771577][ T735] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 69.797760][ T735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 69.809277][ T735] F2FS-fs (loop0): invalid crc value [ 69.907980][ T735] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 69.937827][ T24] audit: type=1400 audit(2000000025.660:246): avc: denied { bind } for pid=750 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.987124][ T24] audit: type=1400 audit(2000000025.660:247): avc: denied { mounton } for pid=750 comm="syz.2.95" path="/12/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 69.989147][ T735] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 70.034486][ T735] F2FS-fs (loop0): Start checkpoint disabled! [ 70.048137][ T24] audit: type=1400 audit(2000000025.780:248): avc: denied { mount } for pid=755 comm="syz.4.98" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.071517][ T756] process 'syz.4.98' launched '/dev/fd/6/' with NULL argv: empty string added [ 70.165583][ T24] audit: type=1400 audit(2000000025.900:249): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.410151][ T24] audit: type=1400 audit(2000000026.140:250): avc: denied { map } for pid=762 comm="syz.1.101" path="socket:[15344]" dev="sockfs" ino=15344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 70.748109][ T768] EXT4-fs (loop2): invalid first ino: 0 [ 71.341150][ T24] audit: type=1400 audit(2000000027.070:251): avc: denied { connect } for pid=759 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.373096][ T778] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 71.722663][ T53] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 71.804202][ T784] EXT4-fs error (device loop1): ext4_orphan_get:1421: comm syz.1.105: bad orphan inode 11862016 [ 71.854446][ T784] EXT4-fs (loop1): mounted filesystem without journal. Opts: noquota,,errors=continue [ 71.930580][ T784] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.556363][ T24] audit: type=1326 audit(2000000028.290:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e51adbe9 code=0x7ffc0000 [ 72.602265][ T24] audit: type=1326 audit(2000000028.320:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=800 comm="syz.2.108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fb3e51adbe9 code=0x7ffc0000 [ 72.722635][ T53] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 72.735554][ T53] usb 4-1: config 0 has no interface number 0 [ 72.912697][ T53] usb 4-1: New USB device found, idVendor=203e, idProduct=8888, bcdDevice=a8.71 [ 72.931516][ T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.949904][ T53] usb 4-1: Product: syz [ 72.961552][ T53] usb 4-1: Manufacturer: syz [ 72.976583][ T53] usb 4-1: SerialNumber: syz [ 73.032404][ T53] usb 4-1: config 0 descriptor?? [ 73.074653][ T53] usb-storage 4-1:0.133: USB Mass Storage device detected [ 73.152632][ T369] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 73.771089][ T53] usb 4-1: USB disconnect, device number 7 [ 73.856458][ T834] overlayfs: failed to resolve './file1': -2 [ 73.872906][ T369] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 73.888256][ T369] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 74.426525][ T848] FAT-fs (loop0): Directory bread(block 64) failed [ 74.447107][ T848] FAT-fs (loop0): Directory bread(block 65) failed [ 74.454502][ T848] FAT-fs (loop0): Directory bread(block 66) failed [ 74.461177][ T848] FAT-fs (loop0): Directory bread(block 67) failed [ 74.469096][ T848] FAT-fs (loop0): Directory bread(block 68) failed [ 74.476299][ T848] FAT-fs (loop0): Directory bread(block 69) failed [ 74.483981][ T848] FAT-fs (loop0): Directory bread(block 70) failed [ 74.490620][ T848] FAT-fs (loop0): Directory bread(block 71) failed [ 74.498000][ T848] FAT-fs (loop0): Directory bread(block 72) failed [ 74.504800][ T848] FAT-fs (loop0): Directory bread(block 73) failed [ 74.671992][ T369] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.682110][ T369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.690166][ T369] usb 3-1: Product: syz [ 74.694445][ T369] usb 3-1: Manufacturer: 䡳엵屑㢳쒻郰Ձ앿鎻ᷭ㕔婡ຕ槕஭⡂댳驻僛蝪댗䠙魽푛睭∅뉛ꨦ祒䳉栚舭೑擈魵풧䟮徧忨ᝡ䩗䥴佼毥器棾扪醪蒄ᓎಜ酫렶쨊恠繢敆Ԧ䞼砵鑻䉫晘⼯᳠鬘힦彐宽䷴扎둙駱ꏘꡦ崊疉⪡퐾凉ኣ [ 74.732509][ T369] usb 3-1: SerialNumber: syz [ 74.978279][ T810] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 75.028956][ T810] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 75.507567][ T865] overlayfs: workdir and upperdir must be separate subtrees [ 75.718494][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 75.718541][ T24] audit: type=1400 audit(2000000283.450:292): avc: denied { create } for pid=871 comm="syz.0.125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.802640][ T369] cdc_ncm 3-1:1.0: bind() failure [ 75.814880][ T24] audit: type=1400 audit(2000000283.550:293): avc: denied { execute } for pid=871 comm="syz.0.125" path="/18/file0/cgroup.controllers" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.842673][ T369] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 75.863345][ T369] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 75.883554][ T369] usb 3-1: USB disconnect, device number 3 [ 76.188749][ T873] fuse: Bad value for 'fd' [ 76.602717][ T20] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 76.850400][ T24] audit: type=1326 audit(2000000284.580:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 76.883242][ T887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.899970][ T890] udc-core: couldn't find an available UDC or it's busy [ 76.901902][ T20] usb 4-1: device descriptor read/64, error -71 [ 76.922836][ T890] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.946149][ T24] audit: type=1326 audit(2000000284.580:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 76.978281][ T24] audit: type=1326 audit(2000000284.580:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 77.012963][ T24] audit: type=1326 audit(2000000284.580:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 77.038314][ T743] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 77.062039][ T24] audit: type=1326 audit(2000000284.580:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 77.092549][ T24] audit: type=1326 audit(2000000284.580:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7eff12d14be9 code=0x7ffc0000 [ 77.116393][ T24] audit: type=1400 audit(2000000284.670:300): avc: denied { mount } for pid=885 comm="syz.2.129" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.141000][ T24] audit: type=1400 audit(2000000284.670:301): avc: denied { search } for pid=885 comm="syz.2.129" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.362568][ T20] usb 4-1: device descriptor read/64, error -71 [ 77.582651][ T743] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.593012][ T743] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.632220][ T900] capability: warning: `syz.2.133' uses 32-bit capabilities (legacy support in use) [ 77.642604][ T20] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 77.693907][ T902] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 77.706244][ T298] udevd[298]: incorrect ext4 checksum on /dev/loop2 [ 77.772656][ T743] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.782373][ T743] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.791998][ T743] usb 2-1: Product: syz [ 77.796798][ T743] usb 2-1: Manufacturer: syz [ 77.801667][ T743] usb 2-1: SerialNumber: syz [ 77.912581][ T20] usb 4-1: device descriptor read/64, error -71 [ 78.132766][ T743] usb 2-1: 0:2 : does not exist [ 78.176257][ T743] usb 2-1: USB disconnect, device number 2 [ 78.283672][ T913] FAT-fs (loop2): Unrecognized mount option "0x0000000000000000" or missing value [ 78.293989][ T910] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 78.293989][ T910] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 78.293989][ T910] [ 78.302594][ T20] usb 4-1: device descriptor read/64, error -71 [ 78.322486][ T910] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000a01c, mo2=0002] [ 78.331136][ T910] System zones: 0-1, 3-36 [ 78.338711][ T910] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nouid32,nouser_xattr,noquota,,errors=continue [ 78.423294][ T298] udevd[298]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 78.503027][ T20] usb usb4-port1: attempt power cycle [ 80.122998][ T934] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.138428][ T933] erofs: (device loop1): mounted with root inode @ nid 36. [ 80.312788][ T938] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 80.634737][ T964] erofs: (device loop1): find_target_block_classic: corrupted dir block 8200 @ nid 36 [ 83.669391][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 83.669429][ T24] audit: type=1400 audit(2000000291.400:320): avc: denied { execute_no_trans } for pid=988 comm="syz.2.155" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.817020][ T992] capability: warning: `syz.2.157' uses deprecated v2 capabilities in a way that may be insecure [ 83.890738][ T994] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 83.915054][ T24] audit: type=1400 audit(2000000291.650:321): avc: denied { setattr } for pid=996 comm="syz.0.158" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.072878][ T24] audit: type=1400 audit(2000000291.810:322): avc: denied { nlmsg_write } for pid=1003 comm="syz.2.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.134228][ T24] audit: type=1400 audit(2000000291.840:323): avc: denied { add_name } for pid=993 comm="syz.3.156" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.140905][ T994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 84.154844][ T24] audit: type=1400 audit(2000000291.840:324): avc: denied { associate } for pid=993 comm="syz.3.156" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.923601][ T1008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.930906][ T1008] IPv6: NLM_F_CREATE should be set when creating new route [ 85.049853][ T1009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.057160][ T1009] IPv6: NLM_F_CREATE should be set when creating new route [ 85.100466][ T1020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 85.112994][ T1012] loop2: p1 < > p3 [ 85.120314][ T1012] loop2: p3 size 134217728 extends beyond EOD, truncated [ 85.170827][ T1023] netlink: 1 bytes leftover after parsing attributes in process `syz.3.164'. [ 85.239967][ T1018] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 85.249419][ T1018] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 85.259217][ T1018] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.163: Failed to acquire dquot type 0 [ 85.271519][ T1018] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.327504][ T1018] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 85.351343][ T1018] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #13: comm syz.0.163: mark_inode_dirty error [ 85.363303][ T1018] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 85.371723][ T1018] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #13: comm syz.0.163: mark_inode_dirty error [ 85.392965][ T1018] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 85.411638][ T1018] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 85.420157][ T1018] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 85.429303][ T1018] EXT4-fs error (device loop0): ext4_truncate:4390: inode #13: comm syz.0.163: mark_inode_dirty error [ 85.446447][ T279] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 85.449447][ T343] blk_update_request: I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.466113][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 85.585327][ T1018] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 85.774842][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.401227][ T1018] EXT4-fs (loop0): 1 truncate cleaned up [ 86.420062][ T343] blk_update_request: I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.431119][ T957] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 86.439510][ T1018] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 86.449718][ T24] audit: type=1326 audit(2000000294.180:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e51adbe9 code=0x7ffc0000 [ 86.472996][ T343] Buffer I/O error on dev loop2p3, logical block 8, async page read [ 86.473100][ T343] blk_update_request: I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.494057][ T24] audit: type=1326 audit(2000000294.180:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3e51adbe9 code=0x7ffc0000 [ 86.517605][ T343] Buffer I/O error on dev loop2p3, logical block 9, async page read [ 86.525972][ T343] blk_update_request: I/O error, dev loop2, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.537181][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.553322][ T24] audit: type=1326 audit(2000000294.180:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1039 comm="syz.2.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3e51adbe9 code=0x7ffc0000 [ 86.587439][ T1018] EXT4-fs (loop0): re-mounted. Opts: (null) [ 86.602584][ T957] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 86.602699][ T343] Buffer I/O error on dev loop2p3, logical block 10, async page read [ 86.623730][ T1018] netlink: 96 bytes leftover after parsing attributes in process `syz.0.163'. [ 86.636042][ T343] blk_update_request: I/O error, dev loop2, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.636927][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.720040][ T957] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 86.740322][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 86.758756][ T343] Buffer I/O error on dev loop2p3, logical block 11, async page read [ 86.767317][ T957] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 86.775617][ T343] Buffer I/O error on dev loop2p3, logical block 12, async page read [ 86.791419][ T957] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 89.317182][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.342651][ T24] kauditd_printk_skb: 82 callbacks suppressed [ 89.342682][ T24] audit: type=1400 audit(2000000297.070:410): avc: denied { name_bind } for pid=1056 comm="syz.0.170" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 89.401097][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.439012][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.500531][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.532715][ T1066] cgroup: syz.0.174 (1066) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 89.549306][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.579316][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.603876][ T1066] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 89.611978][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.651966][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.686499][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 89.733218][ T1054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.173'. [ 90.630711][ T957] print_req_error: 35 callbacks suppressed [ 90.630750][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.648829][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.660000][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.671153][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.682213][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.700229][ T298] blk_update_request: I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.736121][ T957] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.752661][ T298] blk_update_request: I/O error, dev loop2, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.775107][ T298] blk_update_request: I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.786544][ T298] blk_update_request: I/O error, dev loop2, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.807326][ T1085] udc-core: couldn't find an available UDC or it's busy [ 90.824579][ T1085] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 91.106145][ T24] audit: type=1400 audit(2000000298.820:411): avc: denied { read write } for pid=1090 comm="syz.0.181" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.148662][ T1088] incfs: mount failed -22 [ 91.378125][ T24] audit: type=1400 audit(2000000298.870:412): avc: denied { mounton } for pid=1086 comm="syz.3.178" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 91.528050][ T24] audit: type=1400 audit(2000000298.900:413): avc: denied { open } for pid=1090 comm="syz.0.181" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 91.662668][ T279] ------------[ cut here ]------------ [ 91.679308][ T279] WARNING: CPU: 1 PID: 279 at fs/inode.c:304 drop_nlink+0xc5/0x110 [ 91.708323][ T279] Modules linked in: [ 91.712339][ T279] CPU: 0 PID: 279 Comm: syz-executor Not tainted 5.10.240-syzkaller #0 [ 91.720777][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 91.731073][ T279] RIP: 0010:drop_nlink+0xc5/0x110 [ 91.736717][ T279] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 83 23 f2 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 31 b8 ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 91.756717][ T279] RSP: 0018:ffffc90000c17ce8 EFLAGS: 00010293 [ 91.767967][ T279] RAX: ffffffff81ab6e85 RBX: ffff888127eea840 RCX: ffff8881259abb40 [ 91.776530][ T279] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 91.785122][ T279] RBP: ffffc90000c17d10 R08: 0000000000000004 R09: 0000000000000003 [ 91.801427][ T279] R10: fffff52000182f8c R11: 1ffff92000182f8c R12: dffffc0000000000 [ 91.809773][ T279] R13: 1ffff11024fdd511 R14: ffff888127eea888 R15: 0000000000000000 [ 91.818812][ T279] FS: 0000555587106500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 91.828399][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.835441][ T279] CR2: 00007f4d26185f98 CR3: 00000001261e1000 CR4: 00000000003526a0 [ 91.843795][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.851878][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.860323][ T279] Call Trace: [ 91.864191][ T279] shmem_rmdir+0x5b/0x90 [ 91.868650][ T279] vfs_rmdir+0x1b3/0x3e0 [ 91.875664][ T279] incfs_kill_sb+0xfe/0x210 [ 91.880246][ T279] deactivate_locked_super+0xa0/0x100 [ 91.886604][ T279] deactivate_super+0xaf/0xe0 [ 91.891371][ T279] cleanup_mnt+0x446/0x500 [ 91.899181][ T279] __cleanup_mnt+0x19/0x20 [ 91.904058][ T279] task_work_run+0x127/0x190 [ 91.908710][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 91.914420][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 91.919933][ T279] do_syscall_64+0x3d/0x40 [ 91.924902][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 91.930931][ T279] RIP: 0033:0x7fb3e51aef17 [ 91.936135][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 91.956643][ T279] RSP: 002b:00007fff322426d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.965588][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb3e51aef17 [ 91.973945][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff32242790 [ 91.982008][ T279] RBP: 00007fff32242790 R08: 0000000000000000 R09: 0000000000000000 [ 91.990229][ T1105] erofs: (device loop4): mounted with root inode @ nid 36. [ 91.990391][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff32243820 [ 92.006197][ T279] R13: 00007fb3e5230c05 R14: 000000000001658a R15: 00007fff32243860 [ 92.017297][ T279] ---[ end trace 56513f3562d3a8c8 ]--- [ 92.023390][ T279] ================================================================== [ 92.031540][ T279] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 92.037837][ T279] Write of size 4 at addr 0000000000000170 by task syz-executor/279 [ 92.045856][ T279] [ 92.048255][ T279] CPU: 1 PID: 279 Comm: syz-executor Tainted: G W 5.10.240-syzkaller #0 [ 92.057932][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 92.068045][ T279] Call Trace: [ 92.071394][ T279] __dump_stack+0x21/0x24 [ 92.075775][ T279] dump_stack_lvl+0x169/0x1d8 [ 92.080501][ T279] ? thaw_kernel_threads+0x220/0x220 [ 92.085845][ T279] ? show_regs_print_info+0x18/0x18 [ 92.091117][ T279] ? _raw_spin_lock+0x8e/0xe0 [ 92.095844][ T279] ? _raw_spin_trylock_bh+0x130/0x130 [ 92.101304][ T279] ? ihold+0x20/0x60 [ 92.105281][ T279] kasan_report+0xd8/0x130 [ 92.109750][ T279] ? ihold+0x20/0x60 [ 92.113698][ T279] kasan_check_range+0x280/0x290 [ 92.118691][ T279] __kasan_check_write+0x14/0x20 [ 92.123679][ T279] ihold+0x20/0x60 [ 92.127460][ T279] vfs_rmdir+0x247/0x3e0 [ 92.131779][ T279] incfs_kill_sb+0xfe/0x210 [ 92.136372][ T279] deactivate_locked_super+0xa0/0x100 [ 92.141796][ T279] deactivate_super+0xaf/0xe0 [ 92.146526][ T279] cleanup_mnt+0x446/0x500 [ 92.150992][ T279] __cleanup_mnt+0x19/0x20 [ 92.155477][ T279] task_work_run+0x127/0x190 [ 92.160121][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 92.165376][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 92.170892][ T279] do_syscall_64+0x3d/0x40 [ 92.175384][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.181348][ T279] RIP: 0033:0x7fb3e51aef17 [ 92.185845][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 92.205499][ T279] RSP: 002b:00007fff322426d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.213975][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb3e51aef17 [ 92.222002][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff32242790 [ 92.230019][ T279] RBP: 00007fff32242790 R08: 0000000000000000 R09: 0000000000000000 [ 92.238042][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff32243820 [ 92.246057][ T279] R13: 00007fb3e5230c05 R14: 000000000001658a R15: 00007fff32243860 [ 92.254082][ T279] ================================================================== [ 92.262171][ T279] Disabling lock debugging due to kernel taint [ 92.294832][ T279] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 92.302710][ T279] #PF: supervisor write access in kernel mode [ 92.308821][ T279] #PF: error_code(0x0002) - not-present page [ 92.314846][ T279] PGD 10d9a6067 P4D 10d9a6067 PUD 0 [ 92.320220][ T279] Oops: 0002 [#1] PREEMPT SMP KASAN [ 92.325474][ T279] CPU: 0 PID: 279 Comm: syz-executor Tainted: G B W 5.10.240-syzkaller #0 [ 92.335139][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 92.345255][ T279] RIP: 0010:ihold+0x26/0x60 [ 92.349832][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 2a b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 70 1b f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 92.369486][ T279] RSP: 0018:ffffc90000c17d28 EFLAGS: 00010246 [ 92.375629][ T279] RAX: ffff8881259abb00 RBX: 0000000000000000 RCX: 0000000000000286 [ 92.383681][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 92.391698][ T279] RBP: ffffc90000c17d38 R08: 0000000000000004 R09: 0000000000000003 [ 92.399721][ T279] R10: fffffbfff0d8ec48 R11: 1ffffffff0d8ec48 R12: 1ffff11025a75e28 [ 92.407747][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 92.415777][ T279] FS: 0000555587106500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 92.424756][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.431397][ T279] CR2: 0000000000000170 CR3: 00000001261e1000 CR4: 00000000003526b0 [ 92.439408][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.447452][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.455455][ T279] Call Trace: [ 92.458806][ T279] vfs_rmdir+0x247/0x3e0 [ 92.463105][ T279] incfs_kill_sb+0xfe/0x210 [ 92.467675][ T279] deactivate_locked_super+0xa0/0x100 [ 92.473105][ T279] deactivate_super+0xaf/0xe0 [ 92.477835][ T279] cleanup_mnt+0x446/0x500 [ 92.482320][ T279] __cleanup_mnt+0x19/0x20 [ 92.486778][ T279] task_work_run+0x127/0x190 [ 92.491427][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 92.496687][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 92.502194][ T279] do_syscall_64+0x3d/0x40 [ 92.506666][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 92.512593][ T279] RIP: 0033:0x7fb3e51aef17 [ 92.517100][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 92.536754][ T279] RSP: 002b:00007fff322426d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.545222][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb3e51aef17 [ 92.553286][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff32242790 [ 92.561297][ T279] RBP: 00007fff32242790 R08: 0000000000000000 R09: 0000000000000000 [ 92.569304][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff32243820 [ 92.577363][ T279] R13: 00007fb3e5230c05 R14: 000000000001658a R15: 00007fff32243860 [ 92.585379][ T279] Modules linked in: [ 92.589333][ T279] CR2: 0000000000000170 [ 92.593527][ T279] ---[ end trace 56513f3562d3a8c9 ]--- [ 92.599053][ T279] RIP: 0010:ihold+0x26/0x60 [ 92.603600][ T279] Code: 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 01 2a b8 ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 70 1b f2 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 81 [ 92.623261][ T279] RSP: 0018:ffffc90000c17d28 EFLAGS: 00010246 [ 92.629380][ T279] RAX: ffff8881259abb00 RBX: 0000000000000000 RCX: 0000000000000286 [ 92.637401][ T279] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 92.645410][ T279] RBP: ffffc90000c17d38 R08: 0000000000000004 R09: 0000000000000003 [ 92.653425][ T279] R10: fffffbfff0d8ec48 R11: 1ffffffff0d8ec48 R12: 1ffff11025a75e28 [ 92.661435][ T279] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 92.669455][ T279] FS: 0000555587106500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 92.678418][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.685055][ T279] CR2: 0000000000000170 CR3: 00000001261e1000 CR4: 00000000003526b0 [ 92.693080][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.701095][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.709139][ T279] Kernel panic - not syncing: Fatal exception [ 92.715520][ T279] Kernel Offset: disabled [ 92.719865][ T279] Rebooting in 86400 seconds..